Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 8 down vote favorite
1

In linux every user can create symlinks, but in Windows I need an admin command line, or mklink fails. Why is that?

share|improve this question
Indeed, why? Might be the references, by default enabled in programming languages like MS C#, is a vulnerability?! – Val Mar 8 at 19:44

1 Answer

up vote 7 down vote accepted

By default, only administrators can create symbolic links, because they are the only ones who have the SeCreateSymbolicLinkPrivilege privilege found under Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\ granted.

Symbolic links (symlinks) can expose security vulnerabilities in applications that aren't designed to handle symbolic links.

(Source)

share|improve this answer
I'd love to read more details about these security vulnerabilities. – ripper234 Dec 29 '11 at 10:51
2  
@ripper234 Maybe something like this. – ordag Dec 29 '11 at 11:53
I wonder how people buy "this is not allowed because this is not allowed" as the answer to the question "why this is not allowed?". When you say that SeCreateSymbolicLinkPrivilege rule prohibits this, you give exactly this stupid answer. Might be this is "Rule of law" mentality: when people hear a rule they stop thinking. – Val Mar 8 at 19:23

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.