|
|
|
|
|
|
by everyflavourvms
28 days ago
|
|
|
Yep. There's a system of ACLs and integrity levels which determine whether you're allowed to do this or not (doesn't have to be a child process), but for the most common case: * a process running at medium integrity level with the current user's token * another medium integrity process with the same token can open it with PROCESS_CREATE_THREAD and PROCESS_VM_WRITE rights |
|
|