diff options
Diffstat (limited to 'sandbox')
| -rw-r--r-- | sandbox/win/src/window.cc | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/sandbox/win/src/window.cc b/sandbox/win/src/window.cc index b8d6358..ed5a662 100644 --- a/sandbox/win/src/window.cc +++ b/sandbox/win/src/window.cc @@ -100,6 +100,7 @@ ResultCode CreateAltDesktop(HWINSTA winsta, HDESK* desktop) { // Replace the DACL on the new Desktop with a reduced privilege version. // We can soft fail on this for now, as it's just an extra mitigation. static const ACCESS_MASK kDesktopDenyMask = WRITE_DAC | WRITE_OWNER | + DELETE | DESKTOP_CREATEMENU | DESKTOP_CREATEWINDOW | DESKTOP_HOOKCONTROL | |