[Interest] A QThread question...

[NoMercy]

Well, I've tried but it doesn't work even though there is no errors, you
can not get data from user space (in this case I'm trying to get user
screen) :(



On Thu, Oct 22, 2015 at 9:14 AM, Koehne Kai <Kai.Koehne at theqtcompany.com>
wrote:

>
>
> > -----Original Message-----
> > From: interest-bounces+kai.koehne=theqtcompany.com at qt-project.org
> > [mailto:interest-bounces+kai.koehne=theqtcompany.com at qt-project.org] On
> > Behalf Of Constantin Makshin
> > Sent: Thursday, October 22, 2015 7:13 AM
> > To: Qt Interest <interest at qt-project.org>
> > Subject: Re: [Interest] A QThread question...
> >
> > The idea to run different portions of the same process as different
> users not only
> > looks weird, but is also [very] bad from security point of view — no
> matter how
> > many threads you create, they still run in the same address space so
> nothing will
> > stop one user-thread from accidentally or intentionally accessing
> another user-
> > thread's data.
>
> Sure you've to be careful, but still it's an accepted pattern on Windows.
> See e.g.
> https://msdn.microsoft.com/en-us/library/windows/desktop/aa376391%28v=vs.85%29.aspx
> .
>
> Regards
>
> Kai
>
> > On 10/21/2015 02:25 PM, NoMercy wrote:
> > > Thanks for all your replies,
> > >
> > > Currently it works like this;
> > > the service uses "CreateProcessAsUser" to runs an other process in the
> > > user session and it handles all the stuff. It was ok until now since
> > > the target systems were only single-user environments.
> > >
> > > but since we are trying to switch to multiuser environment, every new
> > > user process means a new port and stuff and more complications but if
> > > I can manage do it all from the service, it'll make a lot more sense.
> > > I just need to know if it would work reliably.
> > > I'll make some short tests today if it works in the first place but to
> > > test if it reliably runs for as long as system runs is an other matter.
> > >
> > > Thanks again for all your replies.
> > > Cheers,
> > > Emre
> > >
> > > On Wed, Oct 21, 2015 at 1:28 PM, alexander golks <alex at golks.de
> > > <mailto:alex at golks.de>> wrote:
> > >
> > >     Am Wed, 21 Oct 2015 12:19:20 +0200
> > >     schrieb André Somers <andre at familiesomers.nl
> > >     <mailto:andre at familiesomers.nl>>:
> > >
> > >     > Op 21-10-2015 om 11:48 schreef NoMercy:
> > >     > > Hello everyone and thanks for you replies,
> > >     > >
> > >     > > I've a rather advaced question about QThreads (well advanced
> to my
> > >     > > knowledge anyways)
> > >     > >
> > >     > > I have a Windows service that runs under System user
> (naturally) but I
> > >     > > want to create and run a thread from within that service and
> change
> > >     > > the token of that thread so it runs in user evironment.
> > >     > >
> > >     > My main question is: why? Why do you want to have a single
> process run
> > >     > code as different users? To me, it feels like a hack.
> > >     >
> > >     > André
> > >     >
> > >     > _______________________________________________
> > >     > Interest mailing list
> > >     > Interest at qt-project.org <mailto:Interest at qt-project.org>
> > >     > http://lists.qt-project.org/mailman/listinfo/interest
> > >
> > >     why not simply set correct user/password for this user and let
> > >     windows do it for you?
> > >
> > >     --
> > >     /*
> > >      *"I'm not at all sure this helps you, but as you say there is
> > >     nothing to be found about the problem except in czech and my
> attempt
> > >     att "babelfishing" failed miserably"
> > >      *
> > >      *Husse Jul 30 2007
> > >      */
>
> _______________________________________________
> Interest mailing list
> Interest at qt-project.org
> http://lists.qt-project.org/mailman/listinfo/interest
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.qt-project.org/pipermail/interest/attachments/20151023/e85d191e/attachment.html>