PDA

View Full Version : Running as a LUA


smity
May 14th, 2008, 01:04 PM
Hi

My first visit here. I happened to stumble across the the LUA/SuRun threads a short while back see:

(http://www.wilderssecurity.com/showthread.php?p=1185641#post1185641)

and was impressed enough to set up my system accordingly. I am now checking that all is set up correctly on my PC and have just run AccessEnum (very useful)

I have discovered that I have a couple of applications that broke the rules when installed as regards not allowing Write permission to C:\Program Files and C:\Windows

For instance I have a USB TV Stick App from Pinnacle that gives Everyone full Control over the following folders / files

C:\Program Files\Pinnacle\Mediacenter
C:\Program Files\Pinnacle\Shared Files

I thought this would blow a great big hole in my security but after copying another .exe to these folders I found to my surprise that I still could not execute it due to the SRP kicking in Whilst this is what I would like I cannot understand why this app refuses to execute when those that are already here run properly (As I understand the SRP as given in the above threads gives execute permission only to C:\Program Files and C:\Windows)

So how important is it for me to try and fix these permissions (if that is possible to still keep the program running properly. I am having a few problems with it as an LUA anyway at the moment) and does it matter anyway with the SRP in place

Thanks

Mike

solcroft
May 15th, 2008, 01:38 PM
Have you tried right-clicking the program and choosing "Run as"?

smity
May 15th, 2008, 03:39 PM
If I Rtclick and Run As I get 2 options

1) Administrator. This runs OK after I enter Admin password

2. Current User (LUA). This does not allow the program to run However I do have 2 options determined by a check box which says Protect my computer and data from unauthorised program activity With it checked I get 'Can not create temp folder archive but with it deselected the SRP prevents it opening properly as originally described

Thanks

Mike

Dogbiscuit
May 16th, 2008, 04:10 AM
Has Pinnicle tech support said whether they support this application running under a limited account? Some of their products will run with restricted rights but others won't.

smity
May 16th, 2008, 05:35 AM
Since I last posted I have checked some other stuff and it would appear that all is actually working as I would expect it to. My choice of how I tested this issue was unfortunately not the best way. Of course this still leaves the problem of trying to run Pinnacle as an LUA but that I can deal with

Thanks anyway

Mike