The SetServiceObjectSecurity function sets the security descriptor of a service object.
BOOL SetServiceObjectSecurity(
SC_HANDLE hService, |
// handle of service |
SECURITY_INFORMATION dwSecurityInformation, |
// type of security information requested |
PSECURITY_DESCRIPTOR lpSecurityDescriptor |
// address of security descriptor |
); |
Value |
Meaning |
OWNER_SECURITY_INFORMATION |
Sets the object’s owner security identifier (SID). The hService handle must have WRITE_OWNER access, or the calling process must be the object’s owner. |
GROUP_SECURITY_INFORMATION |
Sets the object’s primary group SID. The hService handle must have WRITE_OWNER access, or the calling process must be the object’s owner. |
DACL_SECURITY_INFORMATION |
Sets the object’s discretionary access control list (ACL). The hService handle must have WRITE_DAC access, or the calling process must be the object’s owner. |
SACL_SECURITY_INFORMATION |
Sets the object’s system ACL. The calling process must have the SE_SECURITY_NAME privilege. For more information about security privileges, see Privileges. |
If the function succeeds, the return value is nonzero.
If the function fails, the return value is zero. To get extended error information, call GetLastError.
The following error codes can be set by the service control manager. Other error codes can be set by the registry functions that are called by the service control manager.
Value |
Meaning |
ERROR_ACCESS_DENIED | |
The specified handle was not opened with the required access, or the calling process is not the owner of the object. | |
ERROR_INVALID_HANDLE | |
The specified handle is invalid. | |
ERROR_INVALID_PARAMETER | |
The specified security information or security descriptor is invalid. | |
ERROR_SERVICE_MARKED_FOR_DELETE | |
The specified service has been marked for deletion. |
The SetServiceObjectSecurity function sets the specified portions of the service object’s security descriptor, based on the information specified in the lpSecurityDescriptor buffer. This function replaces any or all of the security information associated with the service object, according to the flags set in the dwSecurityInformation parameter and subject to the calling process’s access rights.
The initial security descriptor of a service object is created by the service control manager, based on the security descriptor of the process that called the CreateService function to create the service. You can change the security descriptor by calling the SetServiceObjectSecurity function.
CreateService, OpenService, QueryServiceObjectSecurity, SECURITY_DESCRIPTOR
file: /Techref/os/win/api/win32/func/src/f81_19.htm, 6KB, , updated: 2000/4/7 11:19, local time: 2024/12/25 08:52,
13.59.250.115:LOG IN
|
©2024 These pages are served without commercial sponsorship. (No popup ads, etc...).Bandwidth abuse increases hosting cost forcing sponsorship or shutdown. This server aggressively defends against automated copying for any reason including offline viewing, duplication, etc... Please respect this requirement and DO NOT RIP THIS SITE. Questions? <A HREF="http://ecomorder.com/techref/os/win/api/win32/func/src/f81_19.htm"> SetServiceObjectSecurity</A> |
Did you find what you needed? |
Welcome to ecomorder.com! |
Welcome to ecomorder.com! |
.