c:\chef directory is too permissive

[sersut]

https://tickets.opscode.com/browse/CHEF-5285

The directory which is holding the *.pem files are too permissive on windows. We need to make sure that the directory is created with the correct permissions during the MSI installation.

/cc: @adamedx, @btm

[ProTip]

Hello,

I submitted that ticket during an audit of the "Users" group's reach(which is a land mine AFAIK). My recommendation is for only System and Administrator to have grants on that folder, or to at least strip the "Users" grant.

Currently I work around this using Chef itself to set the grants.

[adamedx]

This has been resolved with 4cbb4d0.