Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 575602" data-attributes="member: 32260">I think that two improvements should be added to the new Hard_Configurator build:1. SRP blacklisted, writable subfolders of C:\Windows.For example for Windows 7:c:\windows\debug\WIAc:\windows\Registration\CRMLogc:\windows\System32\catroot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}c:\windows\System32\com\dmpc:\windows\System32\FxsTmpc:\windows\System32\spool\drivers\colorc:\windows\System32\spool\PRINTERSc:\windows\System32\Tasksc:\windows\SysWOW64\FxsTmpc:\windows\SysWOW64\Tasksc:\windows\SysWOW64\com\dmpc:\windows\Tasksc:\windows\Tempc:\windows\tracing2. Option for whitelisting files/folders by path.I hesitated about point 2., because of the possible drive by loophole. But if the user uses the Web browser with Sandbox (like Edge or Chrome), then this option can be a good compromise between usability and security.Personally, I would avoid programs that should be whitelisting by path in the User Space. There are many other applications to choose that works well without it.</blockquote>

[QUOTE="Andy Ful, post: 575602, member: 32260"] I think that two improvements should be added to the new Hard_Configurator build: 1. SRP blacklisted, writable subfolders of C:\Windows. For example for Windows 7: c:\windows\debug\WIA c:\windows\Registration\CRMLog c:\windows\System32\catroot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE} c:\windows\System32\com\dmp c:\windows\System32\FxsTmp c:\windows\System32\spool\drivers\color c:\windows\System32\spool\PRINTERS c:\windows\System32\Tasks c:\windows\SysWOW64\FxsTmp c:\windows\SysWOW64\Tasks c:\windows\SysWOW64\com\dmp c:\windows\Tasks c:\windows\Temp c:\windows\tracing 2. Option for whitelisting files/folders by path. I hesitated about point 2., because of the possible drive by loophole. But if the user uses the Web browser with Sandbox (like Edge or Chrome), then this option can be a good compromise between usability and security. Personally, I would avoid programs that should be whitelisting by path in the User Space. There are many other applications to choose that works well without it. [/QUOTE]

Verification