锟斤拷锟斤拷位锟矫ｏ拷锟斤拷页 > 锟斤拷锟斤拷学院 > 锟斤拷冉锟斤拷锟絎indows锟斤拷锟铰斤拷锟教革拷锟斤拷锟斤拷锟紸ppContainer

锟斤拷冉锟斤拷锟絎indows锟斤拷锟铰斤拷锟教革拷锟斤拷锟斤拷锟紸ppContainer

锟斤拷源锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷|锟斤拷时锟戒：2015-03-04 10:21:20 |锟斤拷锟侥讹拷锟斤拷114锟斤拷|锟斤拷锟斤拷 |锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷

Win8锟斤拷始锟斤拷Windows锟斤拷锟斤拷锟斤拷锟铰的斤拷锟教革拷锟斤拷锟斤拷锟紸ppContainer锟斤拷MetroAPP锟皆硷拷锟斤拷锟斤拷EPM锟斤拷IE Tab锟斤拷锟教讹拷锟斤拷锟斤拷锟斤拷AppContainer锟斤拷锟诫环锟斤拷锟斤拷锟斤拷锟斤拷锟铰碉拷Win10Pre(9926)锟较ｏ拷锟斤拷然锟斤拷恕锟斤拷锟窖讹拷锟斤拷锟斤拷锟绞碉拷锟斤拷叶锟紸ppContainer锟侥癸拷锟斤拷锟斤拷锟斤拷锟斤拷一锟斤拷锟斤拷锟斤拷锟斤拷

AppContainer锟斤拷锟斤拷锟侥变化

Vista锟斤拷前锟斤拷系统锟斤拷锟斤拷XP锟斤拷锟矫帮拷全锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟絊D锟斤拷锟斤拷同锟斤拷锟斤拷锟紻ACL锟斤拷discretionaryaccess control list锟斤拷锟斤拷锟斤拷锟斤拷锟矫伙拷锟斤拷锟矫伙拷锟斤拷姆锟斤拷锟饺拷蕖锟�

Vista锟皆猴拷锟斤拷锟斤拷锟斤拷IntegrityMechanism锟斤拷锟斤拷SD锟斤拷SACL(system access control list)锟斤拷锟斤拷锟斤拷一锟斤拷mandatory label锟斤拷ACE锟斤拷锟斤拷展锟斤拷Windows锟斤拷全锟斤拷系锟斤拷默锟较的匡拷锟狡诧拷锟斤拷锟斤拷No-Write-Up锟斤拷锟斤拷锟斤拷锟较碉拷锟斤拷锟斤拷锟皆硷拷锟斤拷慕锟斤拷潭锟斤拷锟斤拷式细锟斤拷锟斤拷锟斤拷约锟斤拷锟侥讹拷锟襟；斤拷止锟较碉拷锟斤拷锟斤拷锟皆硷拷锟斤拷慕锟斤拷锟叫达拷锟斤拷式细锟斤拷锟斤拷锟斤拷约锟斤拷锟侥讹拷锟斤拷

Win8锟斤拷锟斤拷锟斤拷AppContainer锟斤拷锟斤拷锟斤拷疲锟斤拷峁╋拷烁锟较革拷锟斤拷鹊锟饺拷蘅锟斤拷疲锟斤拷芄锟斤拷锟街癸拷锟轿达拷锟饺拷锟斤拷锟侥讹拷写锟斤拷锟绞★拷

锟斤拷Win10PreX64(9926)锟斤拷锟斤拷EPM锟斤拷IE Tab锟斤拷锟斤拷为锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷些锟戒化锟斤拷

锟斤拷ProcessExplorer锟斤拷锟斤拷钥锟斤拷锟斤拷锟絀E Tab锟斤拷锟教碉拷锟斤拷锟斤拷锟皆硷拷锟斤拷锟斤拷锟斤拷Low锟斤拷锟斤拷锟角憋拷锟斤拷锟紸ppContainer锟斤拷

深度解析Windows最新进程隔离机制AppContainer

图1

锟节斤拷锟斤拷锟斤拷锟皆碉拷Security锟斤拷签锟斤拷锟皆匡拷锟斤拷锟斤拷锟斤拷锟斤拷锟剿憋拷志为AppContainer锟皆硷拷Capability锟斤拷SID锟斤拷

深度解析Windows最新进程隔离机制AppContainer

图2

一锟斤拷AppContainer锟斤拷锟教匡拷锟皆凤拷锟绞的讹拷锟斤拷锟斤拷SD锟斤拷DACL锟斤拷锟斤拷锟斤拷锟剿讹拷锟斤拷锟紸CE锟斤拷锟斤拷IE Tab锟斤拷锟教的斤拷锟教讹拷锟斤拷为锟斤拷锟斤拷

深度解析Windows最新进程隔离机制AppContainer

图3

锟斤拷锟绞癸拷锟紸ppContainer锟斤拷锟斤拷锟斤拷锟�

锟斤拷锟斤拷锟斤拷锟角诧拷锟斤拷锟斤拷MetroAPP锟斤拷锟斤拷要锟斤拷锟斤拷DesktopAPP锟斤拷锟绞癸拷锟紸ppContainer锟斤拷锟斤拷锟斤拷啤锟�

锟斤拷然锟斤拷Win10PreX64(9926)锟斤拷锟斤拷EPM锟斤拷IE Tab锟斤拷锟斤拷为锟斤拷锟斤拷锟斤拷IE选锟斤拷锟斤开锟斤拷EPM,锟铰断碉拷nt!NtCreateLowBoxToken锟斤拷然锟斤拷锟铰斤拷IE Tab锟斤拷锟斤拷锟叫断点，锟斤拷取锟斤拷锟斤拷锟斤拷募锟斤拷锟斤拷锟斤拷栈锟斤拷

深度解析Windows最新进程隔离机制AppContainer

图4

锟缴硷拷锟斤拷通锟斤拷CreateProcess锟斤拷锟紸PI锟酵匡拷锟皆达拷锟斤拷锟斤拷AppContainer锟斤拷锟教★拷

锟斤拷锟斤拷CreateAppContainerProcessStrW锟斤拷锟竭硷拷片锟轿ｏ拷锟斤拷PackageSIDString(图2锟斤拷锟斤拷为AppContainer锟斤拷SID)锟斤拷CapabilitySID(图2锟斤拷锟斤拷为Capability锟斤拷SID) string转为SID锟襟，达拷锟斤拷锟斤拷CreateAppContainerProcessW锟斤拷