Commitcef674b

committed

PGPRO-2784: Windows installer does not clear permissive ACL entries

1 parent8d8a7fe commitcef674bCopy full SHA for cef674b

File tree

+25

-0

lines changed

+25

-0

lines changed

Lines changed: 25 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -928,6 +928,14 @@ Call CheckDataDir`
`928`	`928`	`${endif}`
`929`	`929`	`FileClose$LogFile;Closes the filled file`
`930`	`930`
	`931`	`+ AccessControl::DisableFileInheritance"$DATA_DIR"`
	`932`	`+ AccessControl::RevokeOnFile"$DATA_DIR""(BU)""GenericWrite + GenericRead"`
	`933`	`+ AccessControl::RevokeOnFile"$DATA_DIR""(AU)""GenericWrite + GenericRead"`
	`934`	`+ AccessControl::RevokeOnFile"$DATA_DIR""(DU)""GenericWrite + GenericRead"`
	`935`	`+`
	`936`	`+ push"$INSTDIR"`
	`937`	`+ call createAccessForFolder`
	`938`	`+`
`931`	`939`	`SectionEnd`
`932`	`940`
`933`	`941`	`Section $(componentDeveloper) secDev`
`@@ -2529,3 +2537,20 @@ Function un.onInit`
`2529`	`2537`	`${endif}`
`2530`	`2538`
`2531`	`2539`	`FunctionEnd`
	`2540`	`+`
	`2541`	`+Function createAccessForFolder`
	`2542`	`+ pop$0`
	`2543`	`+ AccessControl::DisableFileInheritance"$0"`
	`2544`	`+ AccessControl::RevokeOnFile"$0""(BU)""GenericWrite"`
	`2545`	`+ AccessControl::RevokeOnFile"$0""(AU)""GenericWrite"`
	`2546`	`+ AccessControl::RevokeOnFile"$0""(DU)""GenericWrite"`
	`2547`	`+ AccessControl::GrantOnFile"$0""(BU)""GenericRead + GenericExecute"`
	`2548`	`+${if}${AtLeastWin8}`
	`2549`	`+;ALL_APP_PACKAGES (S-1-15-2-1)`
	`2550`	`+ AccessControl::GrantOnFile"$0""(S-1-15-2-1)""GenericRead + GenericExecute"`
	`2551`	`+;The SID for "ALL RESTRICTED APPLICATION PACKAGES" is S-1-15-2-2`
	`2552`	`+ AccessControl::GrantOnFile"$0""(S-1-15-2-2)""GenericRead + GenericExecute"`
	`2553`	`+${endif}`
	`2554`	`+`
	`2555`	`+FunctionEnd`
	`2556`	`+`

Comments

(0)