Merge pull request #105 from GridProtectionAlliance/pentest-permissions

Update WiX script to restrict access to the wwwroot folder
GridProtectionAlliance · Nov 25, 2024 · 70293e4 · 70293e4
2 parents aa2f8e4 + 060a350
commit 70293e4
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/Source/Applications/openHistorian/openHistorianSetup/openHistorianSetup.wxs b/Source/Applications/openHistorian/openHistorianSetup/openHistorianSetup.wxs
@@ -230,6 +230,8 @@
     <CustomAction Id="ConfigureServiceAction" BinaryKey="InstallerActions" DllEntry="ConfigureServiceAction" Execute="deferred" Impersonate="no" />
     <CustomAction Id="ServiceAccountAction.SetProperty" Property="ServiceAccountAction" Value="SERVICENAME=[SERVICENAME];SERVICEACCOUNT=[SERVICEACCOUNT];HTTPSERVICEPORTS=[HTTPSERVICEPORTS]" />
     <CustomAction Id="ServiceAccountAction" BinaryKey="InstallerActions" DllEntry="ServiceAccountAction" Execute="deferred" Impersonate="no" />
+    <CustomAction Id="ReadOnlyFolderAction.SetProperty" Property="ReadOnlyFolderAction" Value="SERVICENAME=[SERVICENAME];FOLDERPATH=[WWWROOTFOLDER]" />
+    <CustomAction Id="ReadOnlyFolderAction" BinaryKey="InstallerActions" DllEntry="ReadOnlyFolderAction" Execute="deferred" Impersonate="no" />
 
     <UI>
       <ProgressText Action="ConfigureServiceAction">Configuring service failure recovery operations...</ProgressText>
@@ -244,6 +246,8 @@
       <Custom Action="ConfigureServiceAction" After="ConfigureServiceAction.SetProperty"><![CDATA[&openHistorianFeature=3]]></Custom>
       <Custom Action="ServiceAccountAction.SetProperty" After="ConfigureServiceAction">INSTALLSERVICEFEATURE</Custom>
       <Custom Action="ServiceAccountAction" After="ServiceAccountAction.SetProperty">INSTALLSERVICEFEATURE</Custom>
+      <Custom Action="ReadOnlyFolderAction.SetProperty" After="InstallFiles">INSTALLSERVICEFEATURE OR INSTALLMANAGERFEATURE OR INSTALLCONSOLEFEATURE OR INSTALLTOOLSFEATURE OR INSTALLOPTIONALFEATURE</Custom>
+      <Custom Action="ReadOnlyFolderAction" After="ReadOnlyFolderAction.SetProperty">INSTALLSERVICEFEATURE OR INSTALLMANAGERFEATURE OR INSTALLCONSOLEFEATURE OR INSTALLTOOLSFEATURE OR INSTALLOPTIONALFEATURE</Custom>
       <Custom Action="NetFxExecuteNativeImageCommitInstall" After="NetFxExecuteNativeImageUninstall">0</Custom>
       <Custom Action="NetFxExecuteNativeImageInstall" After="NetFxExecuteNativeImageCommitInstall" />
       <!-- Set write registry values sequence after service install but before service start to restore original service start mode -->