Skip to content

Commit

Permalink
[windows] tighten permissions on datadog.conf
Browse files Browse the repository at this point in the history
Datadog Agent configuration file `datadog.conf` contains sensitive data
such as the API key.
Set the file permission, to allow the following access:
* Users. None
* Administrator & System. Full control

Similar to #76.
  • Loading branch information
yannmh committed Jan 15, 2016
1 parent 69e370e commit 16dacd7
Showing 1 changed file with 9 additions and 1 deletion.
10 changes: 9 additions & 1 deletion packaging/datadog-agent/win32/wix/agent.wxs
Original file line number Diff line number Diff line change
Expand Up @@ -18,6 +18,10 @@

<Media Id="1" Cabinet="agent.cab" EmbedCab="yes" />

<PropertyRef Id="WIX_ACCOUNT_ADMINISTRATORS" />
<PropertyRef Id="WIX_ACCOUNT_LOCALSYSTEM" />
<PropertyRef Id="WIX_ACCOUNT_USERS" />

<Directory Id="TARGETDIR" Name="SourceDir">
<Directory Id="ProgramFilesFolder">
<Directory Id="APPLICATIONROOTDIRECTORY" Name="Datadog"/>
Expand Down Expand Up @@ -101,7 +105,11 @@

<DirectoryRef Id="APPLIDATIONDATADIRECTORY">
<Component Id="datadog.conf" Guid="83461594-01AC-11E2-BE35-37EC6088709B" NeverOverwrite="yes" Permanent="yes">
<File Id="datadog.conf" Name="datadog.conf" Source="$(var.InstallFiles)\datadog_win32.conf"></File>
<File Id="datadog.conf" Name="datadog.conf" Source="$(var.InstallFiles)\datadog_win32.conf">
<Permission User="[WIX_ACCOUNT_ADMINISTRATORS]" GenericAll="yes" />
<Permission User="[WIX_ACCOUNT_LOCALSYSTEM]" GenericAll="yes" />
<Permission User="[WIX_ACCOUNT_USERS]" GenericAll="no"/>
</File>
</Component>
<Directory Id="logs" Name="logs">
<Component Id="logs" Guid="e194d05a-6dc7-40be-a626-6a15b43c456b"
Expand Down

0 comments on commit 16dacd7

Please sign in to comment.