[Interest] A QThread question...

[Constantin Makshin]

The idea to run different portions of the same process as different
users not only looks weird, but is also [very] bad from security point
of view — no matter how many threads you create, they still run in the
same address space so nothing will stop one user-thread from
accidentally or intentionally accessing another user-thread's data.

On 10/21/2015 02:25 PM, NoMercy wrote:
> Thanks for all your replies,
> 
> Currently it works like this;
> the service uses "CreateProcessAsUser" to runs an other process in the
> user session and it handles all the stuff. It was ok until now since the
> target systems were only single-user environments.
> 
> but since we are trying to switch to multiuser environment, every new
> user process means a new port and stuff and more complications but if I
> can manage do it all from the service, it'll make a lot more sense.
> I just need to know if it would work reliably.
> I'll make some short tests today if it works in the first place but to
> test if it reliably runs for as long as system runs is an other matter.
> 
> Thanks again for all your replies.
> Cheers,
> Emre
> 
> On Wed, Oct 21, 2015 at 1:28 PM, alexander golks <alex at golks.de
> <mailto:alex at golks.de>> wrote:
> 
>     Am Wed, 21 Oct 2015 12:19:20 +0200
>     schrieb André Somers <andre at familiesomers.nl
>     <mailto:andre at familiesomers.nl>>:
> 
>     > Op 21-10-2015 om 11:48 schreef NoMercy:
>     > > Hello everyone and thanks for you replies,
>     > >
>     > > I've a rather advaced question about QThreads (well advanced to my
>     > > knowledge anyways)
>     > >
>     > > I have a Windows service that runs under System user (naturally) but I
>     > > want to create and run a thread from within that service and change
>     > > the token of that thread so it runs in user evironment.
>     > >
>     > My main question is: why? Why do you want to have a single process run
>     > code as different users? To me, it feels like a hack.
>     >
>     > André
>     >
>     > _______________________________________________
>     > Interest mailing list
>     > Interest at qt-project.org <mailto:Interest at qt-project.org>
>     > http://lists.qt-project.org/mailman/listinfo/interest
> 
>     why not simply set correct user/password for this user and let
>     windows do it for you?
> 
>     --
>     /*
>      *"I'm not at all sure this helps you, but as you say there is
>     nothing to be found about the problem except in czech and my attempt
>     att "babelfishing" failed miserably"
>      *
>      *Husse Jul 30 2007
>      */

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://lists.qt-project.org/pipermail/interest/attachments/20151022/8e35d8ef/attachment.sig>