-
Notifications
You must be signed in to change notification settings - Fork 259
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Port grantvmgroupaccess code from go-winio and extend functionality. #1347
Merged
anmaxvl
merged 2 commits into
microsoft:master
from
anmaxvl:port-grantvmgroupaccess-code
Apr 23, 2022
Merged
Port grantvmgroupaccess code from go-winio and extend functionality. #1347
anmaxvl
merged 2 commits into
microsoft:master
from
anmaxvl:port-grantvmgroupaccess-code
Apr 23, 2022
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
jterry75
reviewed
Apr 7, 2022
jterry75
reviewed
Apr 7, 2022
jterry75
reviewed
Apr 7, 2022
anmaxvl
force-pushed
the
port-grantvmgroupaccess-code
branch
3 times, most recently
from
April 7, 2022 17:17
af0fd42
to
a4bcc87
Compare
jterry75
reviewed
Apr 7, 2022
jterry75
approved these changes
Apr 7, 2022
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM. One last nit
helsaawy
reviewed
Apr 8, 2022
anmaxvl
force-pushed
the
port-grantvmgroupaccess-code
branch
6 times, most recently
from
April 11, 2022 00:08
acc6a86
to
a5cc184
Compare
helsaawy
approved these changes
Apr 11, 2022
anmaxvl
force-pushed
the
port-grantvmgroupaccess-code
branch
from
April 11, 2022 17:30
25b45d1
to
bd278ed
Compare
katiewasnothere
approved these changes
Apr 22, 2022
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
small nit in the tests, otherwise LGTM
Signed-off-by: Maksim An <maksiman@microsoft.com>
anmaxvl
force-pushed
the
port-grantvmgroupaccess-code
branch
2 times, most recently
from
April 22, 2022 23:53
cf033f5
to
9f020aa
Compare
Add masks for GENERIC_WRITE, GENERIC_EXECUTE and GENERIC_ALL and update function signatures accordingly. Update grantvmgroupaccess tool to support granting permissions from above. Ignore various linter errors resurfaced after code copy-paste. Remove mksyscall_windows.go and update old unit tests and cleanup helper functions and packages used. Add unit test coverage for new functionality. Signed-off-by: Maksim An <maksiman@microsoft.com>
anmaxvl
force-pushed
the
port-grantvmgroupaccess-code
branch
from
April 23, 2022 00:03
9f020aa
to
6b92044
Compare
anmaxvl
added a commit
that referenced
this pull request
Feb 7, 2023
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
As originally suggested here microsoft/go-winio#243
port
go-winio/pkg/security
code into hcsshim repo and further extend thepackage and tooling code to support setting other access permissions like
GENERIC_WRITE
,GENERIC_EXECUTE
,GENERIC_ALL
and their combinations.grantvmgroupaccess
tool now supports various boolean flags to setaforementioned permissions.