{"id":5608,"date":"2022-12-09T10:55:20","date_gmt":"2022-12-09T01:55:20","guid":{"rendered":"\/blog\/?p=5608"},"modified":"2023-09-21T09:26:23","modified_gmt":"2023-09-21T00:26:23","slug":"icacls-%ed%8c%8c%ec%9d%bc-%ea%b6%8c%ed%95%9c-%ec%88%98%ec%a0%95","status":"publish","type":"post","link":"https:\/\/hasu0707.duckdns.org\/blog\/?p=5608","title":{"rendered":"ICACLS (\ud30c\uc77c \uad8c\ud55c \uc218\uc815)"},"content":{"rendered":"\n\uc608\uc81c)
ICACLS \"testfile.txt\" \/T \/grant Administrators:F > NUL
ICACLS \"testfile.txt\" \/T \/grant:r Users:F > NUL
ICACLS \"testfile.txt\" \/T \/grant:r Everyone:F > NUL

    \/T \uc774\ub984\uc5d0 \uc9c0\uc815\ub41c \ub514\ub809\ud130\ub9ac \uc544\ub798\uc758 \uc77c\uce58\ud558\ub294 \ubaa8\ub4e0 \ud30c\uc77c\/\ub514\ub809\ud130\ub9ac\uc5d0\uc11c
       \uc774 \uc791\uc5c5\uc744 \uc218\ud589\ud558\ub3c4\ub85d \uc9c0\uc815\ud569\ub2c8\ub2e4.
    \/grant[:r]
        :r\uc744 \uc0ac\uc6a9\ud558\uba74
        \uc0ac\uc6a9 \uad8c\ud55c\uc774 \uc774\uc804\uc5d0 \ud5c8\uc6a9\ub41c \ubaa8\ub4e0 \uba85\uc2dc\uc801 \uc0ac\uc6a9 \uad8c\ud55c\uc744 \ub300\uccb4\ud569\ub2c8\ub2e4.
        :r\uc744 \uc0ac\uc6a9\ud558\uc9c0 \uc54a\uc73c\uba74 \uc0ac\uc6a9 \uad8c\ud55c\uc774 \uc774\uc804\uc5d0 \ud5c8\uc6a9\ub41c \ubaa8\ub4e0 \uba85\uc2dc\uc801 \uc0ac\uc6a9
        \uad8c\ud55c\uc5d0 \ucd94\uac00\ub429\ub2c8\ub2e4.

    :F - \ubaa8\ub4e0 \uad8c\ud55c

--------------------------------------------------
\ub9e4\ub274\uc5bc
--------------------------------------------------

ICACLS \uc774\ub984 \/save aclfile [\/T] [\/C] [\/L] [\/Q]
    \ub098\uc911\uc5d0 \/restore\uc640 \ud568\uaed8 \uc0ac\uc6a9\ud560 \uc218 \uc788\ub3c4\ub85d \uc774\ub984\uc774 \uc77c\uce58\ud558\ub294 \ud30c\uc77c \ubc0f
    \ud3f4\ub354\uc5d0 \ub300\ud55c DACL\uc744 aclfile\uc5d0 \uc800\uc7a5\ud569\ub2c8\ub2e4. SACL, \uc18c\uc720\uc790 \ub610\ub294
    \ubb34\uacb0\uc131 \ub808\uc774\ube14\uc740 \uc800\uc7a5\ub418\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4.

ICACLS \ub514\ub809\ud130\ub9ac [\/substitute SidOld SidNew [...]] \/restore aclfile
                 [\/C] [\/L] [\/Q]
    \uc800\uc7a5\ub41c DACL\uc744 \ub514\ub809\ud130\ub9ac\uc758 \ud30c\uc77c\uc5d0 \uc801\uc6a9\ud569\ub2c8\ub2e4.

ICACLS \uc774\ub984 \/setowner user [\/T] [\/C] [\/L] [\/Q]
    \uc77c\uce58\ud558\ub294 \ubaa8\ub4e0 \uc774\ub984\uc758 \uc18c\uc720\uc790\ub97c \ubcc0\uacbd\ud569\ub2c8\ub2e4. \uc774 \uc635\uc158\uc740
    \uc18c\uc720\uad8c\uc744 \uac15\uc81c \ubcc0\uacbd\ud558\uc9c0 \uc54a\uace0 takeown.exe \uc720\ud2f8\ub9ac\ud2f0\ub97c
    \uc0ac\uc6a9\ud558\uc5ec \ubcc0\uacbd\ud569\ub2c8\ub2e4.

ICACLS \uc774\ub984 \/findsid Sid [\/T] [\/C] [\/L] [\/Q]
    SID\ub97c \uba85\uc2dc\uc801\uc73c\ub85c \uc9c0\uc815\ud558\ub294 ACL\uc774 \ud3ec\ud568\ub41c \uc77c\uce58\ud558\ub294
    \ubaa8\ub4e0 \uc774\ub984\uc744 \ucc3e\uc2b5\ub2c8\ub2e4.

ICACLS \uc774\ub984 \/verify [\/T] [\/C] [\/L] [\/Q]
    ACL\uc774 \uc815\uaddc\ud615\uc774 \uc544\ub2c8\uac70\ub098 \uae38\uc774\uac00 ACE \uac1c\uc218\uc640 \uc77c\uce58\ud558\uc9c0
    \uc54a\ub294 \ubaa8\ub4e0 \ud30c\uc77c\uc744 \ucc3e\uc2b5\ub2c8\ub2e4.

ICACLS \uc774\ub984 \/reset [\/T] [\/C] [\/L] [\/Q]
    ACL\uc744 \uc77c\uce58\ud558\ub294 \ubaa8\ub4e0 \ud30c\uc77c\uc5d0 \ub300\ud574 \uc0c1\uc18d\ub41c \uae30\ubcf8 ACL\ub85c \ubc14\uafc9\ub2c8\ub2e4

ICACLS \uc774\ub984 [\/grant[:r] Sid:perm[...]]
       [\/deny Sid:perm [...]]
       [\/remove[:g|:d]] Sid[...]] [\/T] [\/C] [\/L] [\/Q]
       [\/setintegritylevel Level:policy[...]]

    \/grant[:r] Sid:perm\uc740 \uc9c0\uc815\ub41c \uc0ac\uc6a9\uc790 \uc561\uc138\uc2a4 \uad8c\ud55c\uc744 \ud5c8\uc6a9\ud569\ub2c8\ub2e4. :r\uc744 \uc0ac\uc6a9\ud558\uba74
        \uc0ac\uc6a9 \uad8c\ud55c\uc774 \uc774\uc804\uc5d0 \ud5c8\uc6a9\ub41c \ubaa8\ub4e0 \uba85\uc2dc\uc801 \uc0ac\uc6a9 \uad8c\ud55c\uc744 \ub300\uccb4\ud569\ub2c8\ub2e4.
        :r\uc744 \uc0ac\uc6a9\ud558\uc9c0 \uc54a\uc73c\uba74 \uc0ac\uc6a9 \uad8c\ud55c\uc774 \uc774\uc804\uc5d0 \ud5c8\uc6a9\ub41c \ubaa8\ub4e0 \uba85\uc2dc\uc801 \uc0ac\uc6a9
        \uad8c\ud55c\uc5d0 \ucd94\uac00\ub429\ub2c8\ub2e4.

    \/deny Sid:perm\uc740 \uc9c0\uc815\ub41c \uc0ac\uc6a9\uc790 \uc561\uc138\uc2a4 \uad8c\ud55c\uc744 \uba85\uc2dc\uc801\uc73c\ub85c \uac70\ubd80\ud569\ub2c8\ub2e4.
        \uc9c0\uc815\ub41c \uc0ac\uc6a9 \uad8c\ud55c\uc5d0 \ub300\ud574 \uba85\uc2dc\uc801\uc778 deny ACE\uac00 \ucd94\uac00\ub418\uace0
        \ubaa8\ub4e0 \uba85\uc2dc\uc801 grant\uc758 \ub3d9\uc77c\ud55c \uc0ac\uc6a9 \uad8c\ud55c\uc774 \uc81c\uac70\ub429\ub2c8\ub2e4.

    \/remove[:[g|d]] Sid\ub294 ACL\uc5d0 \uc788\ub294 \ubaa8\ub4e0 SID \ud56d\ubaa9\uc744 \uc81c\uac70\ud569\ub2c8\ub2e4. :g\ub97c
        \uc0ac\uc6a9\ud558\uba74 \ud574\ub2f9 SID\uc5d0 \ud5c8\uc6a9\ub41c \ubaa8\ub4e0 \uad8c\ud55c \ud56d\ubaa9\uc744 \uc81c\uac70\ud558\uace0 :d\ub97c
        \uc0ac\uc6a9\ud558\uba74 \ud574\ub2f9 SID\uc5d0 \uac70\ubd80\ub41c \ubaa8\ub4e0 \uad8c\ud55c \ud56d\ubaa9\uc744 \uc81c\uac70\ud569\ub2c8\ub2e4.

    \/setintegritylevel [(CI)(OI)]\uc218\uc900\uc5d0 \ub530\ub77c \uba85\uc2dc\uc801\uc73c\ub85c \ubb34\uacb0\uc131 ACE\uac00
        \uc77c\uce58\ud558\ub294 \ubaa8\ub4e0 \ud30c\uc77c\uc5d0 \ucd94\uac00\ub429\ub2c8\ub2e4. \uc774 \uc218\uc900\uc740 \ub2e4\uc74c \uc911 \ud558\ub098\ub85c
        \uc9c0\uc815\ub429\ub2c8\ub2e4.
            L[ow]
            M[edium]
            H[igh]
        \ubb34\uacb0\uc131 ACE\uc5d0 \ub300\ud55c \uc0c1\uc18d \uc635\uc158\uc740 \uc218\uc900\ubcf4\ub2e4 \uc6b0\uc120\ud560 \uc218 \uc788\uace0
        \ub514\ub809\ud130\ub9ac\uc5d0\ub9cc \uc801\uc6a9\ub429\ub2c8\ub2e4.

    \/inheritance:e|d|r
        e - \uc0c1\uc18d\ud560 \uc218 \uc788\ub3c4\ub85d \uc124\uc815\ud569\ub2c8\ub2e4.
        d - ACE\ub97c \uc0c1\uc18d\ud558\uac70\ub098 \ubcf5\uc0ac\ud558\uc9c0 \ubabb\ud558\ub3c4\ub85d \uc124\uc815\ud569\ub2c8\ub2e4.
        r - \uc0c1\uc18d\ub41c \ubaa8\ub4e0 ACE\ub97c \uc81c\uac70\ud569\ub2c8\ub2e4.


\ucc38\uace0:
    SID\ub294 \uc22b\uc790 \ub610\ub294 \uc774\ub984 \ud615\uc2dd\uc774 \ub420 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc22b\uc790 \ud615\uc2dd\uc744 \uc9c0\uc815\ud558\uba74
    SID\uc758 \uc2dc\uc791 \ubd80\ubd84\uc5d0 * \uae30\ud638\ub97c \ubd99\uc5ec\uc57c \ud569\ub2c8\ub2e4.

    \/T \uc774\ub984\uc5d0 \uc9c0\uc815\ub41c \ub514\ub809\ud130\ub9ac \uc544\ub798\uc758 \uc77c\uce58\ud558\ub294 \ubaa8\ub4e0 \ud30c\uc77c\/\ub514\ub809\ud130\ub9ac\uc5d0\uc11c
       \uc774 \uc791\uc5c5\uc744 \uc218\ud589\ud558\ub3c4\ub85d \uc9c0\uc815\ud569\ub2c8\ub2e4.

    \/C \uc5b4\ub5a0\ud55c \ud30c\uc77c \uc624\ub958\uc758 \uacbd\uc6b0\uc5d0\ub3c4 \uc774 \uc791\uc5c5\uc744 \uacc4\uc18d\ud558\ub3c4\ub85d \uc9c0\uc815\ud569\ub2c8\ub2e4.
       \uc624\ub958 \uba54\uc2dc\uc9c0\ub294 \uadf8\ub300\ub85c \ud45c\uc2dc\ub429\ub2c8\ub2e4.

    \/L \ud574\ub2f9 \ub300\uc0c1\uc5d0 \ub300\ud55c \ubc14\ub85c \uac00\uae30 \ub9c1\ud06c \uc790\uccb4\uc5d0\uc11c \uc774 \uc791\uc5c5\uc744 \uc218\ud589\ud558\ub3c4\ub85d
       \uc9c0\uc815\ud569\ub2c8\ub2e4.

    \/Q ICACLS\uac00 \uc131\uacf5 \uba54\uc2dc\uc9c0\ub97c \ud45c\uc2dc\ud558\uc9c0 \uc54a\ub3c4\ub85d \uc9c0\uc815\ud569\ub2c8\ub2e4.

    ICACLS\uc740 ACE \ud56d\ubaa9\uc758 \uc815\uc2dd \uc21c\uc11c\ub97c \uc720\uc9c0\ud569\ub2c8\ub2e4.
            \uba85\uc2dc\uc801 \uac70\ubd80
            \uba85\uc2dc\uc801 \ud5c8\uc6a9
            \uc0c1\uc18d\ub41c \uac70\ubd80
            \uc0c1\uc18d\ub41c \ud5c8\uc6a9

    perm\uc740 \ub2e4\uc74c \ub450 \uac00\uc9c0 \ud615\uc2dd \uc911 \ud558\ub098\ub85c \uc9c0\uc815\ud560 \uc218 \uc788\ub294 \uc0ac\uc6a9 \uad8c\ud55c \ub9c8\uc2a4\ud06c\uc785\ub2c8\ub2e4.
        \ub2e8\uc21c \uad8c\ud55c \uc2dc\ud000\uc2a4:
                N - \uad8c\ud55c \uc5c6\uc74c
                F - \ubaa8\ub4e0 \uad8c\ud55c
                M - \uc218\uc815 \uad8c\ud55c
                RX - \uc77d\uae30 \ubc0f \uc2e4\ud589 \uad8c\ud55c
                R - \uc77d\uae30 \uc804\uc6a9 \uad8c\ud55c
                W - \uc4f0\uae30 \uc804\uc6a9 \uad8c\ud55c
                D - \uc0ad\uc81c \uad8c\ud55c
         \uad04\ud638 \uc548 \uc27c\ud45c\ub85c \uad6c\ubd84\ub41c \ud2b9\uc815 \uad8c\ud55c \ubaa9\ub85d:
                DE - \uc0ad\uc81c
                RC - \uc77d\uae30 \uc81c\uc5b4
                WDAC - DAC \uc4f0\uae30
                WO - \uc4f0\uae30 \uc18c\uc720\uc790
                S - \ub3d9\uae30\ud654
                AS - \uc561\uc138\uc2a4 \uc2dc\uc2a4\ud15c \ubcf4\uc548
                MA - \ucd5c\ub300\ud55c \ud5c8\uc6a9
                GR - \uc77c\ubc18 \uc77d\uae30
                GW - \uc77c\ubc18 \uc4f0\uae30
                GE - \uc77c\ubc18 \uc2e4\ud589
                GA - \uc77c\ubc18 \uc804\uccb4
                RD - \ub370\uc774\ud130 \uc77d\uae30\/\ub514\ub809\ud130\ub9ac \ub098\uc5f4
                WD - \ub370\uc774\ud130 \uc4f0\uae30\/\ud30c\uc77c \ucd94\uac00
                AD - \ub370\uc774\ud130 \ucd94\uac00\/\ud558\uc704 \ub514\ub809\ud130\ub9ac \ucd94\uac00
                REA - \ud655\uc7a5 \ud2b9\uc131 \uc77d\uae30
                WEA - \ud655\uc7a5 \ud2b9\uc131 \uc4f0\uae30
                X - \uc2e4\ud589\/\ud2b8\ub798\ubc84\uc2a4
                DC - \uc790\uc2dd \uc0ad\uc81c
                RA - \ud2b9\uc131 \uc77d\uae30
                WA - \ud2b9\uc131 \uc4f0\uae30
        \uc0c1\uc18d \uad8c\ud55c\uc740 \ubaa8\ub4e0 \ud615\uc2dd \uc55e\uc5d0 \uc62c \uc218 \uc788\uc73c\uba70 \ub514\ub809\ud130\ub9ac\uc5d0\ub9cc
        \uc801\uc6a9\ub429\ub2c8\ub2e4.
                (OI) - \uac1c\uccb4 \uc0c1\uc18d
                (CI) - \ucee8\ud14c\uc774\ub108 \uc0c1\uc18d
                (IO) - \uc0c1\uc18d \uc804\uc6a9
                (NP) - \uc0c1\uc18d \uc804\ud30c \uc548 \ud568
                (I) - \ubd80\ubaa8 \ucee8\ud14c\uc774\ub108\uc5d0\uc11c \uc0c1\uc18d\ub41c \uad8c\ud55c

\uc608:

        icacls c:\\windows\\* \/save AclFile \/T
        - c:\\windows\uc640 \ud574\ub2f9 \ud558\uc704 \ub514\ub809\ud130\ub9ac \uc544\ub798\uc758 \ubaa8\ub4e0 \ud30c\uc77c\uc5d0
        \ub300\ud55c ACL\uc744 AclFile\uc5d0 \uc800\uc7a5\ud569\ub2c8\ub2e4.

        icacls c:\\windows\\ \/restore AclFile
        - c:\\windows\uc640 \ud574\ub2f9 \ud558\uc704 \ub514\ub809\ud130\ub9ac\uc5d0 \uc788\ub294
        AclFile \ub0b4\uc758 \ubaa8\ub4e0 \ud30c\uc77c\uc5d0 \ub300\ud55c ACL\uc744 \ubcf5\uc6d0\ud569\ub2c8\ub2e4.

        icacls file \/grant Administrator:(D,WDAC)
        - \uc0ac\uc6a9\uc790\uc5d0\uac8c \ud30c\uc77c\uc5d0 \ub300\ud55c \uad00\ub9ac\uc790 \uc0ad\uc81c \ubc0f DAC \uc4f0\uae30
        \uad8c\ud55c\uc744 \ud5c8\uc6a9\ud569\ub2c8\ub2e4.

        icacls file \/grant *S-1-1-0:(D,WDAC)
        - SID S-1-1-0\uc73c\ub85c \uc815\uc758\ud55c \uc0ac\uc6a9\uc790\uc5d0\uac8c \ud30c\uc77c\uc5d0 \ub300\ud55c
          \uc0ad\uc81c \ubc0f DAC \uc4f0\uae30 \uad8c\ud55c\uc744 \ud5c8\uc6a9\ud569\ub2c8\ub2e4.<\/span>\n","protected":false},"excerpt":{"rendered":"

\uc608\uc81c)ICACLS “testfile.txt” \/T \/grant Administrators:F > NULICACLS “testfile.txt” \/T \/grant:r Users:F > NULICACLS “testfile.txt” \/T \/grant:r Everyone:F > NUL     \/T \uc774\ub984\uc5d0 \uc9c0\uc815\ub41c \ub514\ub809\ud130\ub9ac \uc544\ub798\uc758 \uc77c\uce58\ud558\ub294 \ubaa8\ub4e0 \ud30c\uc77c\/\ub514\ub809\ud130\ub9ac\uc5d0\uc11c       \uc774 \uc791\uc5c5\uc744 \uc218\ud589\ud558\ub3c4\ub85d \uc9c0\uc815\ud569\ub2c8\ub2e4.    \/grant[:r]        :r\uc744 \uc0ac\uc6a9\ud558\uba74        \uc0ac\uc6a9 \uad8c\ud55c\uc774 \uc774\uc804\uc5d0 \ud5c8\uc6a9\ub41c \ubaa8\ub4e0 \uba85\uc2dc\uc801 \uc0ac\uc6a9 \uad8c\ud55c\uc744 \ub300\uccb4\ud569\ub2c8\ub2e4.    […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_import_markdown_pro_load_document_selector":0,"_import_markdown_pro_submit_text_textarea":"","site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[40],"tags":[],"class_list":["post-5608","post","type-post","status-publish","format-standard","hentry","category-os_win"],"_links":{"self":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/posts\/5608","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=5608"}],"version-history":[{"count":0,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/posts\/5608\/revisions"}],"wp:attachment":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=5608"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=5608"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=5608"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}