A university tries to run our software, but their users don't have admin rights.
However our software requires admin rights to run.
Is there a way to have their system admin create a privilege, just for our software or would this cause a (major) security loophole for their system?
Any other (reasonable) workarounds are welcome too, but changing our software is (sadly) out of the question. This problem occurs in both Windows XP and Vista.
Answer
Yes, this causes a major security hole. If you have any bugs that allow arbitrary code execution or spawning of new processes then you have basically given the user full admin rights to the system.
I know you've said you can't change your software but if it's between that and a lost sale I'd strongly consider it, it's really not that hard to not require administrator rights.
What in particular requires the rights? Do you need to write to certain parts of the disk? Do you need raw access to a device? This would help clarify.
No comments:
Post a Comment