From: Jason A. Donenfeld <Jason@zx2c4.com>
Date: Wed, 23 Jun 2021 23:19:29 +0000 (+0200)
Subject: ipc: allow admins but require high integrity label
X-Git-Tag: 0.0.20211016~15
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=15b24b6179e078c799946f279bb5ac30053fd02d;p=thirdparty%2Fwireguard-go.git

ipc: allow admins but require high integrity label

Might be more reasonable.

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
---

diff --git a/ipc/uapi_windows.go b/ipc/uapi_windows.go
index 3e2709c..a4d68da 100644
--- a/ipc/uapi_windows.go
+++ b/ipc/uapi_windows.go
@@ -54,8 +54,7 @@ var UAPISecurityDescriptor *windows.SECURITY_DESCRIPTOR
 
 func init() {
 	var err error
-	/* SDDL_DEVOBJ_SYS_ALL from the WDK */
-	UAPISecurityDescriptor, err = windows.SecurityDescriptorFromString("O:SYD:P(A;;GA;;;SY)")
+	UAPISecurityDescriptor, err = windows.SecurityDescriptorFromString("O:SYD:P(A;;GA;;;SY)(A;;GA;;;BA)S:(ML;;NWNRNX;;;HI)")
 	if err != nil {
 		panic(err)
 	}