Re: Windows Access Control Demystified

["Bruce Ediger" <eballen1 () qwest net>]

On Thu, 2 Feb 2006, Steven M. Christey wrote:

> to find complex privileges/ACL problems in Windows.  I've always
> suspected that the fine-grained nature of Windows' security mechanisms
> would result in difficult-to-find, easy-to-make vulnerabilities, and

What tickled you to suspect this?  Was this an intuition born of experience
with other operating systems fine-grained security mechanism or do you have
some general principle that covers this?

How does Windows' security mechanisms compare with DEC's VMS' security
mechanisms?  Didn't VMS have some set of ACLs and privileges that would
allow transitive gathering of privileges from some nominally harmless
privilege?