Questions tagged [privilege]

71 questions
2
votes
1 answer

How can I edit entitlements for xcp-services in Xcode 4 for App-Sandboxing

I created an App and started to sandbox it. Now I did privilege separation using xpc-services. I downloaded the "SandboxedFetch" example from Apple, which shows two xpc-services like an application (application-icon). In my App the xpc-services show…
JackPearse
  • 2,922
  • 23
  • 31
2
votes
1 answer

Creating more privilege rings

As I understand it, there are two privilege rings in most operating systems: kernel mode and user mode. Could an operating system developer create additional privilege rings, like a middleware mode or a kernel module mode?
Melab
  • 2,594
  • 7
  • 30
  • 51
2
votes
3 answers

C Privilege Escalation (With Password)

I need to write a C program that will allow me to read/write files that are owned by root. However, I can only run the code under another user. I have the root password, but there are no "sudo" or "su" commands on the system, so I have no way of…
AriX
  • 1,647
  • 2
  • 18
  • 24
2
votes
0 answers

oracle find out date/time of grant

I am using oracle 11g and need to find out date and time of a specific grant. Is there any way to find out WHEN (date & time) a privilege was granted? dba_tab_privs has no date column, nor has sys.objauth$... even if there is no way, please answer…
oFace
  • 216
  • 3
  • 5
2
votes
1 answer

Why would I want an Oracle user without 'create session' privilege?

I just learned that by default, Oracle does not grant the 'create session' privilege to new users. No problem, I can do that myself. Anyway, I'm curious: why would I want an Oracle user without 'create session' privilege? What can it be used for?…
Jens Bannmann
  • 4,845
  • 5
  • 49
  • 76
2
votes
1 answer

Execute a command line on the command prompt needs `administrate privilege` even using "ranas"?

This is the command: netsh wlan start hostednetwork runas /noprofile /user:mymachine\\administrator I used ranas to prevent the administrator privilege, but it won't. But when I manually run the command prompt as an administrator and write netsh…
Caffe Latte
  • 1,693
  • 1
  • 14
  • 32
2
votes
1 answer

Mysql function or procedure to check grants

An user should only execute functions and procedures. I grant EXECUTE to this user and revoke other privileges from the same user for security reasons. How to check if this user has only the EXECUTE privilege for a stored function?
Sergey L. Mokeev
  • 21
  • 1
  • 2
  • 5
1
vote
1 answer

Accessing underprivileged stack by weakening the CPL with RPL in intel microprocessor

As far as I know, when we want to access a stack segment, the DPL of the descriptor should be equal to max(RPL,CPL) where RPL is of the SS segment register, and CPL means current privilege level. So can we access an underprivileged stack by…
Preetom Saha Arko
  • 2,588
  • 4
  • 21
  • 37
1
vote
1 answer

RPL of CS while transferring control to a conforming code segment in intel microprocessor

RPL of CS doesn't always match with the DPL of a conforming code segment. But shouldn't it always match with the DPL of the calling code segment (the code from where the control has been transferred) ? And what will happen with the RPL bits when we…
Preetom Saha Arko
  • 2,588
  • 4
  • 21
  • 37
1
vote
1 answer

Creating shortcut in user Start menu from elevated Inno Setup installer

During its lifetime, MyApp creates extra shortcuts to Userappdata, MyAppGroupName\MyAppShortcut#2 MyAppGroupName\MyAppShortcut#3 ... yet as Inno Setup requires elevation because of registry Association edits the original {Group} item is inserted in…
Laurie Stearn
  • 959
  • 1
  • 13
  • 34
1
vote
1 answer

Oracle user does not get privilege from role

I am running an Oracle XE (11.2.0.2.0). I have one user U1 creating / owning the tables and another user U2 using them. When U1 grants privileges to U2, everything works. Now U1 has created a role TESTROLE, granted it some privileges, and granted U2…
Renardo
  • 499
  • 4
  • 13
1
vote
2 answers

How to privilege escalate www-data when you're logged in as www-data

On Linux, how can I give www-data more permissions/privileges when I am logged in as that user? whoami = www-data A bit of background. I have performed an ethical hack on a web application, I have managed to upload a file by bypassing the extension…
D14
  • 19
  • 1
  • 1
  • 3
1
vote
1 answer

Privileged instructions, adding register values?

I finished homework for a graduate course in operating systems. I got a great score and I only missed one tiny point of a question. It asked which were privileged instructions and which were not. I answered all correctly except one: Adding one…
user427390
1
vote
3 answers

How to restrict other user drop root user in MySQL?

I created a user and granted "CREATE USER" privileges. I found that user can drop any other user include root. How can I prevent that happen? Actually we are implementing Mysql as a Service just like AWS's RDS. We will create a super user which…
user3752700
  • 103
  • 5
1
vote
1 answer

ORACLE Selecting from ALL_SOURCE yields empty result when executed from within routine

I have a routine whose task is to extract code from ALL_SOURCE. This is done using the following cursor: CURSOR w_cur ( p_name VARCHAR2 , p_type VARCHAR2) IS SELECT text , line FROM ALL_SOURCE …
FDavidov
  • 3,505
  • 6
  • 23
  • 59