System and method for accessing a restricted object
View Patent ↗A system and method wherein an intermediary process provides access to a restricted object associated with a source process on behalf of a destination process. The intermediary process may be a trusted process that is available as a service to other processes on the computing platform. The intermediary process may assume one or more privileges associated with the source process whereby the restricted object may be accessed by the intermediary process on behalf of the destination process. Secure access to the restricted object and the risk of malicious exploitation are mitigated since the intermediary process is a trusted service that is known to provide specific functionality.
1. A computer implemented method executed by a processor for an intermediary process to provide access to a restricted object associated with a source process on behalf of a destination process comprising:
modifying one or more privileges associated with the intermediary process to match a first set of privileges associated with the source process;
obtaining a reference to the restricted object associated with the source process;
modifying one or more privileges associated with the intermediary process to match the second privileges associated with the destination process; and
creating an output object in a non-transitory storage memory by copying at least a portion of contents of the restricted object to the output object, the output object having the second set privileges associated with the destination process,
wherein the destination process does not have the first set of privileges to access the restricted object.
2. The computer implemented method of claim 1 , where the restricted object is only accessible to a process that has one or more privileges that match the first set of privileges of the source process with which the restricted object is associated.
3. The computer implemented method of claim 1 , where the restricted object and the output object are each files in a file system.
4. The computer implemented method of claim 1 , where neither the source process nor the destination process has system administration privileges.
5. The computer implemented method of claim 1 , where each of the source process and the destination process comprise any one of an application, a service, an agent, and a device driver.
6. The computer implemented method of claim 1 , where the one or more privileges associated with the intermediary process include any one or more of a user identifier and a group identifier.
7. The computer implemented method of claim 3 , where the reference to the restricted object is a file identifier.
8. The computer implemented method of claim 1 , where modifying the one or more privileges associated with the intermediary process to match the first set of privileges associated with the source process further comprising:
discovering first set of privileges associated with the source process;
setting one or more privileges associated with the intermediary process to be the same as the discovered first set of privileges.
9. The computer implemented method of claim 1 , where modifying the one or more privileges associated with the intermediary process to match the second set of privileges associated with the destination process further comprising:
discovering the second set of privileges associated with the destination process;
setting one or more privileges associated with the intermediary process to be the same as the discovered second set of privileges.
10. A system for accessing a restricted object where an intermediary process provides access to the restricted object associated with a source process on behalf of a destination process, the system comprising:
a memory containing instructions; and
a processor coupled to the memory for executing the instructions to perform:
modifying one or more privileges associated with the intermediary process to match a first set of privileges associated with the source process;
obtaining a reference to the restricted object associated with the source process;
modifying one or more privileges associated with the intermediary process to match a second set of privileges associated with the destination process; and
creating an output object in the memory by copying at least a portion of contents of the restricted object to the output object, the output object having the second set of privileges associated with the destination process,
wherein the destination process does not have the first set of privileges to access the restricted object.
11. The system of claim 10 , where the restricted object is only accessible to a process that has one or more privileges that match the first set of privileges of the source process with which the restricted object is associated.
12. The system of claim 10 , where the restricted object and the output object are each files in a file system.
13. The system of claim 10 , where neither the source process nor the destination process has system administration privileges.
14. The system of claim 10 , where each of the source process and the destination process comprise any one of an application, a service, an agent, and a device driver.
15. The system of claim 10 , where the one or more privileges associated with the intermediary process include any one or more of a user identifier and a group identifier.
16. The system of claim 12 , where the reference to the restricted object is a file identifier.
17. The system of claim 10 , where modifying the one or more privileges associated with the intermediary process to match the first set of privileges associated with the source process further comprising:
discovering first set of privileges associated with the source process; and
setting one or more privileges associated with the intermediary process to be the same as the discovered first set of privileges.
18. The system of claim 10 , where modifying the one or more privileges associated with the intermediary process to match the first set of privileges associated with the destination process further comprising:
discovering the second set of privileges associated with the destination process; and
setting one or more privileges associated the with intermediary process to be the same as the discovered second set of privileges.