- Fix windows service to be created run with limited rights, as a

  network service account, from Mario Turschmann.

git-svn-id: file:///svn/unbound/trunk@3734 be551aaa-1e26-0410-a405-d3ace91eadb9

diff --git a/doc/Changelog b/doc/Changelog
index 8d7b9a17a6e8421d0dae4fb5d52c355385c41095..fad1141481188df90dede618ddca097231adfa53 100644 (file)
--- a/doc/Changelog
+++ b/doc/Changelog
@@ -1,3 +1,7 @@
+31 May 2016: Wouter
+       - Fix windows service to be created run with limited rights, as a
+         network service account, from Mario Turschmann.
+
 30 May 2016: Wouter
        - Fix time in case answer comes from cache in ub_resolve_event().
        - Attempted fix for #765: _unboundmodule missing for python3.

diff --git a/winrc/w_inst.c b/winrc/w_inst.c
index d0de73b5bcbd381854bdf75566f6443255939944..bd1af7131a9afc270b6b518bc7a79879913b7c2b 100644 (file)
--- a/winrc/w_inst.c
+++ b/winrc/w_inst.c
@@ -232,7 +232,8 @@ wsvc_install(FILE* out, const char* rename)
                 NULL, /* no tag identifier */
                 NULL, /* no deps */
                 NULL, /* on LocalSystem */
-                NULL /* no password */
+               _T("NT AUTHORITY\\NetworkService"), /* network service account with restricted rights */
+                "" /* no password (must be an empty string) */
                 );
         if(!sv) {
                 CloseServiceHandle(scm);