Skip to content

Commit 67667fe

Browse files
fix(p0): lock down ProgramData bin permissions (#30)
1 parent 8353d56 commit 67667fe

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

installer/cloudsqlctl.iss

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -46,9 +46,9 @@ Root: HKLM; Subkey: "SYSTEM\CurrentControlSet\Control\Session Manager\Environmen
4646
Root: HKLM; Subkey: "SYSTEM\CurrentControlSet\Control\Session Manager\Environment"; ValueType: string; ValueName: "CLOUDSQLCTL_PROXY_PATH"; ValueData: "{code:GetProxyPath}"; Flags: uninsdeletevalue
4747

4848
[Dirs]
49-
Name: "{commonappdata}\CloudSQLCTL"; Permissions: users-modify
50-
Name: "{commonappdata}\CloudSQLCTL\logs"; Permissions: users-modify
51-
Name: "{commonappdata}\CloudSQLCTL\bin"; Permissions: users-modify
49+
Name: "{commonappdata}\CloudSQLCTL"; Permissions: admins-full system-full users-readexec
50+
Name: "{commonappdata}\CloudSQLCTL\logs"; Permissions: admins-full system-full users-modify
51+
Name: "{commonappdata}\CloudSQLCTL\bin"; Permissions: admins-full system-full users-readexec
5252
Name: "{commonappdata}\CloudSQLCTL\secrets"; Permissions: admins-full system-full
5353

5454
[Code]

0 commit comments

Comments
 (0)