[THRIFT-4813] NamedPipes may not work in all cases

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.13.0
• Component/s: netstd - Library
• Labels: namedpipes
• Patch Info: Patch Available
• Assignee: Jens Geyer
• Reporter: Jens Geyer
• Created: 27/Feb/19 02:18
• Updated: 16/Oct/19 22:27
• Resolved: 28/Feb/19 07:43

Description

The classes provided in current net standard to deal with PipeSecurity are broken, they simply do not work. Hence, in some cases a connection cannot be established. A possible scenario would be between a normal client and an elevated server (think of an UI to control a service process).

Ticket references

• issue 24040 NamedPipeServerStream: Provide support for WRITE_DAC
• issue 34400 Have a mechanism for lower privileged user to connect to a privileged user's pipe
• issue 31190 System.IO.Pipes.AccessControl package does not work

Also interesting in this context is issue 30170 which finally got closed and is continued in issue )31190 (listed above).

Issue Links

• links to: GitHub Pull Request #1749