Changes

|-

|-

| Arbitrary service handle forging

| Arbitrary service handle forging

| Prior to [[3.0.1]], the service manager ("sm") built-in system module could provide valid handles for any [[Services_API|service]] if the user creates a new "sm:" port session but bypasses [[Services_API#Initialize|initialization]].

| Prior to [[3.0.1]], the service manager ("sm") built-in system module treats a user as though it has full permissions if the user creates a new "sm:" port session but bypasses [[Services_API#Initialize|initialization]].

In [[3.0.1]], "sm" returns error code 0x415 if [[Services_API#Initialize|Initialize]] has not been called yet.

In [[3.0.1]], "sm" returns error code 0x415 if [[Services_API#Initialize|Initialize]] has not been called yet.

| Access to any service

| Acquisition, registering, and unregistering of arbitrary services

| [[3.0.1]]

| [[3.0.1]]

| [[3.0.1]]

| [[3.0.1]]