Is it possible to create a driver specfic SID for an UMDF driver?

kk 1 Reputation point
2021-08-12T17:44:12.02+00:00

Similar to creating a service specific SIDs for windows services, Is it possible to create a driver specific SID for an umdf driver to differentiate between different umdf drivers. My goal is to allow a specific umdf driver access to my KMDF driver by adding the driver specific SID in the allowed ACLs. Allowing entire class of UMDF driver provides access to all umdf drivers, which is undesirable. UMDF runs in a local service account, but although not a windows service. It should be a unique SID across the entire world. Please suggest.

Reference: https://techcommunity.microsoft.com/t5/ask-the-performance-team/ws2008-windows-service-hardening/ba-p/372702

Windows 10 Security
Windows 10 Security
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
2,780 questions
0 comments No comments
{count} votes