From 1f80cb498b016d5ccd640bdf502f9d7945f068c6 Mon Sep 17 00:00:00 2001 From: Liliia Sabitova <107196662+LiliaSabitova@users.noreply.github.com> Date: Tue, 29 Nov 2022 19:55:41 +0100 Subject: [PATCH 1/2] Update PowerShellCapabilitiesProvider.cs Change PowerShell ExecutionPolicy to RemoteSigned. --- .../Capabilities/PowerShellCapabilitiesProvider.cs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/Microsoft.VisualStudio.Services.Agent/Capabilities/PowerShellCapabilitiesProvider.cs b/src/Microsoft.VisualStudio.Services.Agent/Capabilities/PowerShellCapabilitiesProvider.cs index dc2daba4dd..4d0208f34a 100644 --- a/src/Microsoft.VisualStudio.Services.Agent/Capabilities/PowerShellCapabilitiesProvider.cs +++ b/src/Microsoft.VisualStudio.Services.Agent/Capabilities/PowerShellCapabilitiesProvider.cs @@ -25,7 +25,7 @@ public async Task> GetCapabilitiesAsync(AgentSettings settings, string powerShellExe = HostContext.GetService().GetPath(); string scriptFile = Path.Combine(HostContext.GetDirectory(WellKnownDirectory.Bin), "powershell", "Add-Capabilities.ps1").Replace("'", "''"); ArgUtil.File(scriptFile, nameof(scriptFile)); - string arguments = $@"-NoLogo -Sta -NoProfile -NonInteractive -ExecutionPolicy Unrestricted -Command "". '{scriptFile}'"""; + string arguments = $@"-NoLogo -Sta -NoProfile -NonInteractive -ExecutionPolicy RemoteSigned -Command "". '{scriptFile}'"""; string enablePrereleaseVSVersions = AgentKnobs.EnableVSPreReleaseVersions.GetValue(UtilKnobValueContext.Instance()).AsString(); Environment.SetEnvironmentVariable("IncludePrereleaseVersions", enablePrereleaseVSVersions); From 9e9b877a5d0280f82a799f03726576daa37cdc73 Mon Sep 17 00:00:00 2001 From: Liliia Sabitova <107196662+LiliaSabitova@users.noreply.github.com> Date: Tue, 29 Nov 2022 19:57:12 +0100 Subject: [PATCH 2/2] Update DiagnosticLogManager.cs Change PowerShell ExecutionPolicy to RemoteSigned --- src/Agent.Worker/DiagnosticLogManager.cs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/Agent.Worker/DiagnosticLogManager.cs b/src/Agent.Worker/DiagnosticLogManager.cs index 8fda673ee6..f631e0831a 100644 --- a/src/Agent.Worker/DiagnosticLogManager.cs +++ b/src/Agent.Worker/DiagnosticLogManager.cs @@ -583,7 +583,7 @@ private async Task GetLocalGroupMembership() string scriptFile = Path.Combine(HostContext.GetDirectory(WellKnownDirectory.Bin), "powershell", "Get-LocalGroupMembership.ps1").Replace("'", "''"); ArgUtil.File(scriptFile, nameof(scriptFile)); - string arguments = $@"-NoLogo -Sta -NoProfile -NonInteractive -ExecutionPolicy Unrestricted -Command "". '{scriptFile}'"""; + string arguments = $@"-NoLogo -Sta -NoProfile -NonInteractive -ExecutionPolicy RemoteSigned -Command "". '{scriptFile}'"""; try {