August 2000
Intermediate to advanced
800 pages
21h 5m
English
Content preview from Microsoft® Windows® 2000 Security HandbookBecome an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
Start your free trial
Service Security Considerations for Programmers
Now that we've gone through some background, let's dig into the security issues around writing good services. The suggestions that follow outline some of the common coding mistakes that can lead to unstable and possibly insecure services. The items that follow are unique to services; I discuss general secure coding guidelines later.
Accepting Messages
The SCM can send five different control messages to a service:
SERVICE_CONTROL_STOP
SERVICE_CONTROL_PAUSE
SERVICE_CONTROL_CONTINUE
SERVICE_CONTROL_SHUTDOWN
SERVICE_CONTROL_INTERROGATE
The only message that all services are required to accept is SERVICE_CONTROL_INTERROGATE. By setting the dwControlsAccepted value that is passed through the SERVICE_STATUS ...