From: Dawid Konrad Kohnke <51542233+anytokin@users.noreply.github.com>
Date: Mon, 1 Jun 2026 11:35:48 +0000 (+0200)
Subject: gh-150368: Change Windows user group to secure identifier in test_tempfile (#150369)
X-Git-Url: http://git.ipfire.org/gitweb/?a=commitdiff_plain;h=9d64c355b5471e2d27e036d3662e97567d259c61;p=thirdparty%2FPython%2Fcpython.git

gh-150368: Change Windows user group to secure identifier in test_tempfile (#150369)
---

diff --git a/Lib/test/test_tempfile.py b/Lib/test/test_tempfile.py
index 0e00ff1d0cc3..3b081ecd4a3a 100644
--- a/Lib/test/test_tempfile.py
+++ b/Lib/test/test_tempfile.py
@@ -332,7 +332,9 @@ class TestBadTempdir:
         with _inside_empty_temp_dir():
             probe = os.path.join(tempfile.tempdir, 'probe')
             if os.name == 'nt':
-                cmd = ['icacls', tempfile.tempdir, '/deny', 'Everyone:(W)']
+                # Use security identifier *S-1-1-0 instead
+                # of localized "Everyone" to not depend on the locale.
+                cmd = ['icacls', tempfile.tempdir, '/deny', '*S-1-1-0:(W)']
                 stdout = None if support.verbose > 1 else subprocess.DEVNULL
                 subprocess.run(cmd, check=True, stdout=stdout)
             else:
@@ -355,7 +357,9 @@ class TestBadTempdir:
                     self.make_temp()
             finally:
                 if os.name == 'nt':
-                    cmd = ['icacls', tempfile.tempdir, '/grant:r', 'Everyone:(M)']
+                    # Use security identifier *S-1-1-0 instead
+                    # of localized "Everyone" to not depend on the locale.
+                    cmd = ['icacls', tempfile.tempdir, '/grant:r', '*S-1-1-0:(M)']
                     subprocess.run(cmd, check=True, stdout=stdout)
                 else:
                     os.chmod(tempfile.tempdir, oldmode)