Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Port grantvmgroupaccess code from go-winio and extend functionality. #1347

Merged
merged 2 commits into from
Apr 23, 2022

Conversation

anmaxvl
Copy link
Contributor

@anmaxvl anmaxvl commented Apr 7, 2022

As originally suggested here microsoft/go-winio#243
port go-winio/pkg/security code into hcsshim repo and further extend the
package and tooling code to support setting other access permissions like
GENERIC_WRITE, GENERIC_EXECUTE, GENERIC_ALL and their combinations.

grantvmgroupaccess tool now supports various boolean flags to set
aforementioned permissions.

@anmaxvl anmaxvl force-pushed the port-grantvmgroupaccess-code branch 3 times, most recently from af0fd42 to a4bcc87 Compare April 7, 2022 17:17
Copy link
Contributor

@jterry75 jterry75 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM. One last nit

internal/security/grantvmgroupaccess_test.go Outdated Show resolved Hide resolved
internal/security/syscall_windows.go Outdated Show resolved Hide resolved
internal/security/grantvmgroupaccess.go Outdated Show resolved Hide resolved
@anmaxvl anmaxvl force-pushed the port-grantvmgroupaccess-code branch 6 times, most recently from acc6a86 to a5cc184 Compare April 11, 2022 00:08
internal/security/grantvmgroupaccess.go Outdated Show resolved Hide resolved
@anmaxvl anmaxvl force-pushed the port-grantvmgroupaccess-code branch from 25b45d1 to bd278ed Compare April 11, 2022 17:30
Copy link
Contributor

@katiewasnothere katiewasnothere left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

small nit in the tests, otherwise LGTM

Signed-off-by: Maksim An <maksiman@microsoft.com>
@anmaxvl anmaxvl force-pushed the port-grantvmgroupaccess-code branch 2 times, most recently from cf033f5 to 9f020aa Compare April 22, 2022 23:53
Add masks for GENERIC_WRITE, GENERIC_EXECUTE and GENERIC_ALL and update
function signatures accordingly.
Update grantvmgroupaccess tool to support granting permissions from above.

Ignore various linter errors resurfaced after code copy-paste.
Remove mksyscall_windows.go and update old unit tests and cleanup helper
functions and packages used.

Add unit test coverage for new functionality.

Signed-off-by: Maksim An <maksiman@microsoft.com>
@anmaxvl anmaxvl force-pushed the port-grantvmgroupaccess-code branch from 9f020aa to 6b92044 Compare April 23, 2022 00:03
@anmaxvl anmaxvl merged commit 113a929 into microsoft:master Apr 23, 2022
@anmaxvl anmaxvl deleted the port-grantvmgroupaccess-code branch April 23, 2022 00:08
anmaxvl added a commit that referenced this pull request Feb 7, 2023
Sync ADO with upstream to enable including test GCS binaries as
part of dev-pipeline

Related work items: #1311, #1322, #1341, #1343, #1345, #1347, #1348, #1350, #1353, #1354, #1355, #1358, #1361, #1365, #1368, #1369, #1370
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

5 participants