Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

GetTokenIntegrityLevel never returns SYSTEM IL #10

Open
antonioCoco opened this issue Dec 2, 2023 · 0 comments
Open

GetTokenIntegrityLevel never returns SYSTEM IL #10

antonioCoco opened this issue Dec 2, 2023 · 0 comments
Labels
bug Something isn't working

Comments

@antonioCoco
Copy link
Owner

There is a bug in the function GetTokenIntegrityLevel function which will never returns a SYSTEM IL for a token.

While this should be never problematic due to the fact logon with explicit credentials can returns only Medium or High IL tokens, it's better to fix the bug for avoiding any unwanted behaviors in the future.

Bug lies here:

RunasCs/RunasCs.cs

Lines 1624 to 1628 in a1e47b5

else if (dwIntegrityLevel >= SECURITY_MANDATORY_HIGH_RID)
{
// High Integrity
return IntegrityLevel.High;
}

So when a SYSTEM IL level is found, the High IL condition satisfied and the value is returned from the function.

@antonioCoco antonioCoco added the bug Something isn't working label Dec 2, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant