The Old New Thing

If you grant somebody SeDebugPrivilege, you gave away the farm

March 14, 2008 Mar 14, 2008 03/14/08

Raymond Chen

By default, users can debug only processes that they own. In order to debug processes owned by other users, you have to possess the SeDebugPrivilege privilege. But don't grant this privilege casually, because once you do, you gave away the farm. If you let users debug processes owned by other users, then they can debug processes owned by ...