Fix check for whether postmaster is running as a Windows service. master
authorHeikki Linnakangas <[email protected]>
Mon, 26 Sep 2016 06:19:20 +0000 (09:19 +0300)
committerHeikki Linnakangas <[email protected]>
Mon, 26 Sep 2016 06:19:20 +0000 (09:19 +0300)
commit7b175d6673563e7749c566bc72134302eae89215
treea1a833cc9314650338ec88787f093b2fbe95c9b5
parentda6c4f6ca88df346573bdada2aa2544510bf167e
Fix check for whether postmaster is running as a Windows service.

If postmaster is launched with a restricted security token, with the
"Log in as Service" privilege explicitly removed, the token will contain
SECURITY_SERVICE_RID with the SE_GROUP_USE_FOR_DENY_ONLY flag, and without
the SE_GROUP_ENABLED flag. pgwin32_is_service() was fooled by that, and
thought that it's running as a service. Fix to check for the
SE_GROUP_ENABLED flag, like we do in pgwin32_is_admin().

Patch by Michael Paquier, per Breen Hagan's report and analysis. Backpatch
to all supported versions.

Bug: #13755
Discussion: <20151104062315[email protected]>
src/port/win32security.c