Disable registry access for a specific process (WinAPI)

I have a problem that I can’t find an answer to, although I’m sure that it is there. Is there a way to disable the registry and file access for a newly created process? I use Job objects ( http://msdn.microsoft.com/en-us/library/windows/desktop/ms682409(v=vs.85).aspx ) and it says to set permissions for each new work process and in several books that I read that you can control files such as the registry and file access.

Looking for my answer, I saw that I needed to add a LUID for things like SE_BACKUP_NAME, etc. (or whatever it is called), but none of these privilege constants seem to reflect the type of control I want. question: how can I disable access to registry / file entries for a newly created process in Job?

I am trying to create a stand-alone application, by the way. This means that I can prevent him from making any changes to the registry or writing any files while working.

Any help would be appreciated!

+5
source share
2 answers

Windows accesses many resources during the start of the process, so if you successfully disabled access to the file system and registry, the process did not start.

, , Windows . Chrome .

Chrome , Windows, , Chrome. , .

+3

, , susbsystems (COM, , DLL, ..). , , . , IE .

0

All Articles