upstream/icinga2
1
0
Fork 0
mirror of https://github.com/Icinga/icinga2.git synced 2026-02-03 20:40:17 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Merge branch 'bugfix/windows-permissions-custom-user-7998' into HEAD

Browse source
This commit is contained in:
Alexander A. Klimov 2026-02-03 11:30:48 +01:00
commit 55ff69689d
1 changed files with 31 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

35
agent/windows-setup-agent/SetupWizard.cs
View file

@ -238,14 +238,12 @@ namespace Icinga
string serviceUser = txtUser.Text.Trim();
DirectoryInfo di = new DirectoryInfo(Program.Icinga2InstallDir);
DirectorySecurity ds = di.GetAccessControl();
FileSystemAccessRule rule = new FileSystemAccessRule(serviceUser,
FileSystemRights.Modify,
InheritanceFlags.ObjectInherit | InheritanceFlags.ContainerInherit, PropagationFlags.None, AccessControlType.Allow);
try {
ds.AddAccessRule(rule);
di.SetAccessControl(ds);
AddAccessRuleToFSTree(rule, Program.Icinga2InstallDir);
AddAccessRuleToFSTree(rule, Program.Icinga2DataDir);
} catch (System.Security.Principal.IdentityNotMappedException) {
ShowErrorText("Could not set ACLs for user \"" + serviceUser + "\". Identitiy is not mapped.\n");
return;
@ -285,6 +283,35 @@ namespace Icinga
FinishConfigure();
}
private void AddAccessRuleToFile(FileSystemAccessRule rule, string file)
{
FileInfo fi = new FileInfo(file);
FileSecurity fs = fi.GetAccessControl();
fs.AddAccessRule(rule);
fi.SetAccessControl(fs);
}
private void AddAccessRuleToDir(FileSystemAccessRule rule, string dir)
{
DirectoryInfo di = new DirectoryInfo(dir);
DirectorySecurity ds = di.GetAccessControl();
ds.AddAccessRule(rule);
di.SetAccessControl(ds);
}
private void AddAccessRuleToFSTree(FileSystemAccessRule rule, string root)
{
AddAccessRuleToDir(rule, root);
foreach (string path in Directory.EnumerateDirectories(root, "*", SearchOption.AllDirectories)) {
AddAccessRuleToDir(rule, path);
}
foreach (string path in Directory.EnumerateFiles(root, "*", SearchOption.AllDirectories)) {
AddAccessRuleToFile(rule, path);
}
}
private void FinishConfigure()
{
if (InvokeRequired) {