Hey, guys.

How this thing work in K-m (1.5.4)?

Because, for example:

C:\DropM\DropMyRights.exe "C:\KM\k-meleon.exe" C

nspr4.dll - not found
copy nspr4.dll into DropM\ folder - no effect.

I think folder name is important.

Quote

#
Drop My Rights
Install DropMyRights in C:\Program Files\DropMyRights\ If you pick another folder my shortcuts won't work without modification. Note: DropMyRights is not a program that you ...
cybercoyote.org/security/drop.shtml - Cached

Not familiar with JamesD setup for DropMyRights, but this is what I use with KM 1.6beta.

C:\DropMyRights\DropMyRights.exe "C:\Program Files\K-Meleon\k-meleon.exe" N

N

I think K-Meleon not need this tool: http://kmeleon.sourceforge.net/wiki/CommandLineOptions

Quote
Command line parameters documentation:
-norestrict
K-Meleon 1.5.1 try to run itself with lower privilege by default. This option remove the security restriction added in 1.5.1. Available since K-Meleon 1.5.2.

K-Meleon already running with lower privilege by default.

K-Meleon in Spanish



Edited 1 time(s). Last edit at 12/07/2010 07:50PM by desga2.

@ ndebord

with 1.6beta the same situation(N,C,U no matter):

1-st not found nspr4.dll
copy nspr4 to \DropMyRights\

then not found wsock32.dll
copy wsock32 to \DropMyRights\
etc..

ws2_32.dll
ws2help.dll
winmm.dll
mozcrt19.dll

and when all files in folder - error (0xc0000022)


@ desga2 "K-Meleon already running with lower privilege by default."

hm... Nice. Thank's desga for the info, don't know that!

But, "lower privilege" it's like "N" mode(normal user) in DropMyRights?
If so, it's possible run K-m with lower privilege than normal user?

Try (written in one line):

"C:\Program Files\DropMyRights\DropMyRights.exe" "C:\Program Files\k-Meleon\k-meleon.exe"

"" is needed if path has spaces like: Program Files.
Idea from: http://cybercoyote.org/security/drop.shtml

When this works - try with parameters.

---

p.s.

Quote
km2
@ ndebord
1.) mozcrt19.dll


@ desga2 "K-Meleon already running with lower privilege by default."

hm... Nice. Thank's desga for the info, don't know that!

2.) But, "lower privilege" it's like "N" mode(normal user) in DropMyRights?
If so, it's possible run K-m with lower privilege than normal user?

1.) You tell us the almost impossible. GRE 1.5.4 official is compiled with VC 7.1. Non Officil Update Packages by desga2 might be compiled with either VC 7.1 (msvcr71.dll) or VC 6 (msvcr.dll).
Only some of my own private GRE builds for 1.5.4 were done with VC 8 and mozcrt19.dll. I use them but AFAIRemember i never offered them for download.


mozcrt19.dll belongs to 1.6 = beta! mozcrt19.dll can be build with VC 8 and higher - it needs "ac_add_options --enable-jemalloc" in .mozconfig to build.
Else an altered ./Program Files/Microsoft Visual Studio 8/VC/lib/msvcrt.lib taken from a GRE build (with --enable-jemalloc) can be used to build for mozcrt19.dll.

So: mozcrt19.dll does not belong to a normal 1.5.4! It cannot be missing.

Its even unlikely that drop my rights was compiled with this rare dll.


2.) Tell us how to run below the rights of a normal user?

Below normal user = IMHO do not run at all.



Edited 1 time(s). Last edit at 12/08/2010 12:07AM by guenter.

@ guenter

> Try (written in one line)

Path written in one line.

> You tell us the almost impossible. GRE 1.5.4

It's about 1.6beta!
With 1.5.4 the same, but without mozcrt19.dll

(the line: path\DropMyRights.exe "path\k-meleon.exe" N)

> "Its even unlikely that drop my rights was compiled with this rare dll."

link from cybercoyote page:
http://cybercoyote.org/security/drop.shtml

> "Tell us how to run below the rights of a normal user?"

- N – normal user;
- C – constrained user;
- U – untrusted user;

Quote
km2
@ guenter

> Try (written in one line)

Path written in one line.

> You tell us the almost impossible. GRE 1.5.4

It's about 1.6beta!
With 1.5.4 the same, but without mozcrt19.dll

(the line: path\DropMyRights.exe "path\k-meleon.exe" N)

> "Its even unlikely that drop my rights was compiled with this rare dll."

link from cybercoyote page:
http://cybercoyote.org/security/drop.shtml

> "Tell us how to run below the rights of a normal user?"

- N – normal user;
- C – constrained user;
- U – untrusted user;

1.) ok - thx for info. & make sure You use "" if that path contains spaces.
In English ./program files/k-meleon has a space. Do not know about path in Your language.

2.) ok - thx for correcting me. I overread (did not notice) that You extended the original question.

3.) mozcrt19.dll = Mozilla Custom C Runtime & = no part of drop my rights.

And it would be a drop my rights problem if runtime is needed in DMR folder if used with DMR. Maybe DMR does not like runtimes in the application folder instead of the windows system folder location?

4.) ok - thx for info. But the detail does not make much difference.
You must grant execution rights to the exe and writing rights to profiles.
That is the bare minimum.

Try: to place K-Meleon param that makes run with full rights into "path to K-M brakets" and N behind it.

p.s. IMHO It does not make much sense to use drop my rights with an application that automatically drops its rights anyway.



Edited 1 time(s). Last edit at 12/08/2010 03:33PM by guenter.

1.) Ok, but path has no spaces.

3.) Maybe DMR does not like runtimes in the application folder instead of the windows system folder location?

Just notice.. When in line present parametr C (constrained user)

result: nspr4.dll - not found. Copy nspr4 into DropMyRights\ or system32\ - has no effect, absolutely(nspr4.dll - not found).

path\DropMyRights\DropMyRights.exe path\K-Meleon16\k-meleon.exe C

4). "Try: to place K-Meleon param that makes run with full rights into "path to K-M brakets" and N behind it."

path\DropMyRights\DropMyRights.exe "path\K-Meleon16\k-meleon.exe -norestrict" C
path\DropMyRights\DropMyRights.exe "path\K-Meleon16\k-meleon.exe -norestrict" N

result: "CreateProcessAsUser failed (2)" (through cmd line)

still no effect.


> p.s. It does not make much sense to use drop my rights with an application that automatically drops its rights anyway.

Yes. But.., in case "Constrained user" it make sense.

p.s. And what that "try" means?
K-Meleon run itself with lower privilege or just try to run itself with lower privilege?

1.) ok. That excludes that.

3.) Did You already try with another application that has these files (e.g. Firefox)?

4.) ok.

I wonder why ndbord seems to have few problems.
He has en-US XP pro system and uses DMR.


p.s. "Try" applicable for systems (I assume all NT based OS - not 9x based OS) that can run programs with different privilege levels should use it where possible. Dorian, kko desga2, alain (?) ... will know exactly.

I use K-Meleon with that assumption - I am alone on my PC. Only K-Meleon is normally used in the wild internet for longer periods. So it is good enough for me.


greetings to UA from DE



Edited 1 time(s). Last edit at 12/10/2010 04:17PM by guenter.

> 3.) Did You already try with another application that has these files (e.g. Firefox)?

Yes. It's SeaMonkey(2.0.11).

path\DropMyRights.exe path\seamonkey.exe C

js3250.dll - not found
copy js3250 --> DropMyRights\
js3250.dll - still not found .)

> I wonder why ndbord seems to have few problems.
He has en-US XP pro system and uses DMR.

Xp Pro Sp3

> p.s. "Try" applicable for systems (I assume all NT based OS - not 9x based OS) that can run programs with different privilege levels should use it where possible.

Ok. Thanks for info.

> greetings to UA from DE

Thanks, Gunter.
Greetings to DE from UA

Quote
km2
> 3.) Did You already try with another application that has these files (e.g. Firefox)?

Yes. It's SeaMonkey(2.0.11).

path\DropMyRights.exe path\seamonkey.exe C

js3250.dll - not found
copy js3250 --> DropMyRights\
js3250.dll - still not found .)

It should throw exactly the same errors as K-Meleon 1.6beta?

greetings from Hannover



Edited 1 time(s). Last edit at 12/11/2010 08:55PM by guenter.

> It should throw exactly the same errors as K-Meleon 1.6beta?

The similar.

K-M 1.6b:
path\DropMyRights.exe path\k-meleon.exe C nspr4.dll only needed.

SeaMonkey:
path\DropMyRights.exe path\seamonkey.exe C js3250.dll only needed.

Greetings from Zhytomyr.

Someone experience similar troubles?