You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@thrift.apache.org by "Jens Geyer (Jira)" <ji...@apache.org> on 2021/04/02 10:24:00 UTC

[jira] [Commented] (THRIFT-5391) Named pipes transport hardening

    [ https://issues.apache.org/jira/browse/THRIFT-5391?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17313783#comment-17313783 ] 

Jens Geyer commented on THRIFT-5391:
------------------------------------

* added new flag to implement [PIPE_REJECT_REMOTE_CLIENTS|https://docs.microsoft.com/en-us/windows/win32/api/winbase/nf-winbase-createnamedpipea]
* CreateFile() now enforces SECURITY_SQOS_PRESENT | SECURITY_ANONYMOUS flags [according to this patch|https://github.com/dotnet/coreclr/pull/379/files]

> Named pipes transport hardening
> -------------------------------
>
>                 Key: THRIFT-5391
>                 URL: https://issues.apache.org/jira/browse/THRIFT-5391
>             Project: Thrift
>          Issue Type: Sub-task
>          Components: netstd - Library
>            Reporter: Jens Geyer
>            Assignee: Jens Geyer
>            Priority: Major
>
> implement a suitable variant of THRIFT-5388 for netstd



--
This message was sent by Atlassian Jira
(v8.3.4#803005)