What about running CMF in a limited account?

[Guest]

[Japo]

I see now CMF is very lightweight. Most security software follow the strategy of installing a service, and that gives them full system access even if I'm using a limited account. But CMF has no service (right?), just the cmf.exe from whatever account one's logged into. My concern is that a program running in a limited account has allowance for terminating processes of that same account only.

Does this really protect if CMF is running with limited rights? And what would the consequences be of "running as" admin a program fron a limited account while CMF is running only with limited rights? Is there a difference when CMF is bundled with CFP or installed standalone?

[Ragwing]

As CMF is using a driver (and not a service), I don't think there'll be a permission-issue. cmf.exe is just the GUI (and also displays the warning about a BO), the driver does the real job.
Driver can do pretty much anything. Even kill the system-process.

Cheers,
Ragwing

[Japo]

Okay I had no idea.

And where can that driver be found (in XP Home)?

[Ragwing]

It's named 'cmfd.sys', and it's located in %programfiles%\Comodo\Memory Firewall.

Cheers,
Ragwing

[Tags:]