aboutsummaryrefslogtreecommitdiffstatshomepage
path: root/elevate/privileges.go
diff options
context:
space:
mode:
authorJason A. Donenfeld <Jason@zx2c4.com>2019-08-05 16:04:39 +0200
committerJason A. Donenfeld <Jason@zx2c4.com>2019-08-05 20:12:19 +0200
commitc1ee46faae672e8024cb114450d974232fe44a8b (patch)
tree161840e31285965c1aae7f51e7a769522ba22d58 /elevate/privileges.go
parentelevate: require builtin admins group and proper reg key (diff)
downloadwireguard-windows-c1ee46faae672e8024cb114450d974232fe44a8b.tar.xz
wireguard-windows-c1ee46faae672e8024cb114450d974232fe44a8b.zip
elevate: move service/token into proper module
Diffstat (limited to '')
-rw-r--r--elevate/privileges.go (renamed from services/tokens.go)18
1 files changed, 1 insertions, 17 deletions
diff --git a/services/tokens.go b/elevate/privileges.go
index bca75475..a02d8a5d 100644
--- a/services/tokens.go
+++ b/elevate/privileges.go
@@ -3,7 +3,7 @@
* Copyright (C) 2019 WireGuard LLC. All Rights Reserved.
*/
-package services
+package elevate
import (
"errors"
@@ -13,22 +13,6 @@ import (
"golang.org/x/sys/windows"
)
-func TokenIsMemberOfBuiltInAdministrator(token windows.Token) bool {
- gs, err := token.GetTokenGroups()
- if err != nil {
- return false
- }
- isAdmin := false
- for _, g := range gs.AllGroups() {
- if (g.Attributes&windows.SE_GROUP_USE_FOR_DENY_ONLY != 0 || g.Attributes&windows.SE_GROUP_ENABLED != 0) && g.Sid.IsWellKnown(windows.WinBuiltinAdministratorsSid) {
- isAdmin = true
- break
- }
- }
- runtime.KeepAlive(gs)
- return isAdmin
-}
-
func DropAllPrivileges(retainDriverLoading bool) error {
processHandle, err := windows.GetCurrentProcess()
if err != nil {