From: Wouter Wijngaards <wouter@nlnetlabs.nl>
Date: Tue, 31 May 2016 11:41:49 +0000 (+0000)
Subject: - Fix windows service to be created run with limited rights, as a
X-Git-Tag: release-1.5.9rc1~13
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=0f197e85cce44485562971acd12411158bed6680;p=thirdparty%2Funbound.git

- Fix windows service to be created run with limited rights, as a
  network service account, from Mario Turschmann.


git-svn-id: file:///svn/unbound/trunk@3734 be551aaa-1e26-0410-a405-d3ace91eadb9
---

diff --git a/doc/Changelog b/doc/Changelog
index 8d7b9a17a..fad114148 100644
--- a/doc/Changelog
+++ b/doc/Changelog
@@ -1,3 +1,7 @@
+31 May 2016: Wouter
+	- Fix windows service to be created run with limited rights, as a
+	  network service account, from Mario Turschmann.
+
 30 May 2016: Wouter
 	- Fix time in case answer comes from cache in ub_resolve_event().
 	- Attempted fix for #765: _unboundmodule missing for python3.
diff --git a/winrc/w_inst.c b/winrc/w_inst.c
index d0de73b5b..bd1af7131 100644
--- a/winrc/w_inst.c
+++ b/winrc/w_inst.c
@@ -232,7 +232,8 @@ wsvc_install(FILE* out, const char* rename)
                 NULL, /* no tag identifier */
                 NULL, /* no deps */
                 NULL, /* on LocalSystem */
-                NULL /* no password */
+		_T("NT AUTHORITY\\NetworkService"), /* network service account with restricted rights */
+                "" /* no password (must be an empty string) */
                 );
         if(!sv) {
                 CloseServiceHandle(scm);