[Interest] A QThread question...

[Koehne Kai]

> -----Original Message-----
> From: interest-bounces+kai.koehne=theqtcompany.com at qt-project.org
> [mailto:interest-bounces+kai.koehne=theqtcompany.com at qt-project.org] On
> Behalf Of Constantin Makshin
> Sent: Thursday, October 22, 2015 7:13 AM
> To: Qt Interest <interest at qt-project.org>
> Subject: Re: [Interest] A QThread question...
> 
> The idea to run different portions of the same process as different users not only
> looks weird, but is also [very] bad from security point of view — no matter how
> many threads you create, they still run in the same address space so nothing will
> stop one user-thread from accidentally or intentionally accessing another user-
> thread's data.

Sure you've to be careful, but still it's an accepted pattern on Windows. See e.g.  https://msdn.microsoft.com/en-us/library/windows/desktop/aa376391%28v=vs.85%29.aspx .

Regards

Kai

> On 10/21/2015 02:25 PM, NoMercy wrote:
> > Thanks for all your replies,
> >
> > Currently it works like this;
> > the service uses "CreateProcessAsUser" to runs an other process in the
> > user session and it handles all the stuff. It was ok until now since
> > the target systems were only single-user environments.
> >
> > but since we are trying to switch to multiuser environment, every new
> > user process means a new port and stuff and more complications but if
> > I can manage do it all from the service, it'll make a lot more sense.
> > I just need to know if it would work reliably.
> > I'll make some short tests today if it works in the first place but to
> > test if it reliably runs for as long as system runs is an other matter.
> >
> > Thanks again for all your replies.
> > Cheers,
> > Emre
> >
> > On Wed, Oct 21, 2015 at 1:28 PM, alexander golks <alex at golks.de
> > <mailto:alex at golks.de>> wrote:
> >
> >     Am Wed, 21 Oct 2015 12:19:20 +0200
> >     schrieb André Somers <andre at familiesomers.nl
> >     <mailto:andre at familiesomers.nl>>:
> >
> >     > Op 21-10-2015 om 11:48 schreef NoMercy:
> >     > > Hello everyone and thanks for you replies,
> >     > >
> >     > > I've a rather advaced question about QThreads (well advanced to my
> >     > > knowledge anyways)
> >     > >
> >     > > I have a Windows service that runs under System user (naturally) but I
> >     > > want to create and run a thread from within that service and change
> >     > > the token of that thread so it runs in user evironment.
> >     > >
> >     > My main question is: why? Why do you want to have a single process run
> >     > code as different users? To me, it feels like a hack.
> >     >
> >     > André
> >     >
> >     > _______________________________________________
> >     > Interest mailing list
> >     > Interest at qt-project.org <mailto:Interest at qt-project.org>
> >     > http://lists.qt-project.org/mailman/listinfo/interest
> >
> >     why not simply set correct user/password for this user and let
> >     windows do it for you?
> >
> >     --
> >     /*
> >      *"I'm not at all sure this helps you, but as you say there is
> >     nothing to be found about the problem except in czech and my attempt
> >     att "babelfishing" failed miserably"
> >      *
> >      *Husse Jul 30 2007
> >      */