At least, in Windows XP, which I'm using, though a very throughly lobotomized Win2k-ish version, setting SYSTEM to deny, all caps, means the group system, I.E. hardware drivers can't physically access the file, so at the physical layer nothing can execute that block of the disk.
And why not block read? Because many protection systems store some configuration information in the executable that's not wanted to execute, so by allowing reading and writing, but blocking execute, I can fake current-gen stuff into thinking all is happy.
![[personal profile]](https://www.dreamwidth.org/img/silk/identity/user.png){kind=small}
SYSTEM = hardware
Date: 2002-04-14 02:44 am (UTC)And why not block read? Because many protection systems store some configuration information in the executable that's not wanted to execute, so by allowing reading and writing, but blocking execute, I can fake current-gen stuff into thinking all is happy.
Make more sense now, hon? :-)