diff options
| author | Heikki Linnakangas <heikki.linnakangas@iki.fi> | 2017-03-17 11:14:01 +0200 |
|---|---|---|
| committer | Heikki Linnakangas <heikki.linnakangas@iki.fi> | 2017-03-17 11:14:53 +0200 |
| commit | 3ebcc2498d2b011d42f7ad6a50728b9d7cfb1286 (patch) | |
| tree | f3ddbcb9815ded586aee9af999d9f8d6124fce04 /src/backend/regex/regexport.c | |
| parent | 8f8a5aefc73524658f989f3abd929afa5e7d3ff7 (diff) | |
Fix and simplify check for whether we're running as Windows service.
If the process token contains SECURITY_SERVICE_RID, but it has been
disabled by the SE_GROUP_USE_FOR_DENY_ONLY attribute, win32_is_service()
would incorrectly report that we're running as a service. That situation
arises, e.g. if postmaster is launched with a restricted security token,
with the "Log in as Service" privilege explicitly removed.
Replace the broken code with CheckProcessTokenMembership(), which does
this correctly. Also replace similar code in win32_is_admin(), even
though it got this right, for simplicity and consistency.
Per bug #13755, reported by Breen Hagan. Back-patch to all supported
versions. Patch by Takayuki Tsunakawa, reviewed by Michael Paquier.
Discussion: https://www.postgresql.org/message-id/20151104062315.2745.67143%40wrigleys.postgresql.org
Diffstat (limited to 'src/backend/regex/regexport.c')
0 files changed, 0 insertions, 0 deletions