Release v0.7 (Beta) #21
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
…edentials cache. (Inactive gsudo services will end. Active ones will remain open until the elevated app is closed.
Protection against parent process tampering. Protection against debugger attached on non-elevated gsudo.
…ant be used again. (very safe) Added `--unsafe` so credentials cache accepts connections from any gsudo parent process and duration is set to infinite. Virtually disables UAC. (use at your own risk) Renamed '--raw' to '--piped', because 'raw' is not very representative.... `--raw` still supported for backwards compat.
…rks as an alias for backward compat). Fixes in AdjustUacIsolationRequest.
…stead of Impersonation
…ity Level. gsudo can now elevate or restrict the permissions of a given command. Added `status` verb to list info on the current console/gsudo session.
…l on the same console.
…lient and uses the service to change it's security token. Piped, Attach, and VT modes now Obosolete. Initial refactor ProcessFactor.
fix: Fixed tests
If invoked from a network drive, once elevated it won't be able to read the network drive because is not connected on the elevated session, Therefore, disabled this protection for this scenario.
- Added CacheMode setting for higher default security and customization of the cache sessions and UAC popups - Added security warnings when starting the cache session or when changing the CacheMode.cs - SingleUseElevation: When cache is off and not in auto mode, the UAC popup shows a more explicit command line to elevate on the UAC popup. - Improved 'gsudo status' to show if there is a cache session available. - Silent -k if used as in: gsudo -k command - Deprecated console modes: attached, piped, vt, superseeded by TokenSwitch mode. - Removed --unsafe and --nocache because CacheMode superseeds them.
|
This is getting really nice! Great work! |
…ipts can cache on and off without affecting other scritps/cache sessions. (use -k to kill all sessions)
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Release v0.7
gsudo cache on/off.Those who want to see a reduced amount of UAC popups must opt-in to start a cache session (
gsudo cache on) or set theAutomode (gsudo config CacheMode Auto).Are you leaving the keyboard to a co-worker? run
gsudo -kto stop all cache sessions.gsudo can not only launch elevated but also unelevate or restrict the permissions of a given command. With the added the
-integrity {integrity}| (-i {integrity}for short) option to launch a process with any integrity level. For example:gsudo -i Low {command}start the process with low integrity, restricted permissions.gsudo -i Medium {command}start with normal permissions. Can be used to unelevate a process.High(the default) or higher has local admin privileges.Added
gsudo statusto show info regarding the user, elevation, and cache status.gsudois now just one singleEXEfile, (noDLLs). (Single executable #26)New internal method to elevate/unelevate based on replacing the new process security token, instead of (the now deprecated) console attachment/redirection.
Fixes:
teecommand (or any other awaiting for Std Input closure) now works properly. (gsudo Tee hangs when used to save files from Vim #25)Chocolateyscripts upgrade scenarios (gsudo chocolatey upgrade gsudoends up breaking gsudo command #17)