Skip to content

Commit 9fa65b9

Browse files
yannmhKostas
authored and
Kostas
committed
[windows] tighten permissions on datadog.conf
Datadog Agent configuration file `datadog.conf` contains sensitive data such as the API key. Set the file permission, to allow the following access: * Users. None * Administrator & System. Full control Similar to #76.
1 parent 86075cf commit 9fa65b9

File tree

1 file changed

+9
-1
lines changed

1 file changed

+9
-1
lines changed

packaging/datadog-agent/win32/wix/agent.wxs

+9-1
Original file line numberDiff line numberDiff line change
@@ -18,6 +18,10 @@
1818

1919
<Media Id="1" Cabinet="agent.cab" EmbedCab="yes" />
2020

21+
<PropertyRef Id="WIX_ACCOUNT_ADMINISTRATORS" />
22+
<PropertyRef Id="WIX_ACCOUNT_LOCALSYSTEM" />
23+
<PropertyRef Id="WIX_ACCOUNT_USERS" />
24+
2125
<Directory Id="TARGETDIR" Name="SourceDir">
2226
<Directory Id="ProgramFilesFolder">
2327
<Directory Id="APPLICATIONROOTDIRECTORY" Name="Datadog"/>
@@ -101,7 +105,11 @@
101105

102106
<DirectoryRef Id="APPLIDATIONDATADIRECTORY">
103107
<Component Id="datadog.conf" Guid="83461594-01AC-11E2-BE35-37EC6088709B" NeverOverwrite="yes" Permanent="yes">
104-
<File Id="datadog.conf" Name="datadog.conf" Source="$(var.InstallFiles)\datadog_win32.conf"></File>
108+
<File Id="datadog.conf" Name="datadog.conf" Source="$(var.InstallFiles)\datadog_win32.conf">
109+
<Permission User="[WIX_ACCOUNT_ADMINISTRATORS]" GenericAll="yes" />
110+
<Permission User="[WIX_ACCOUNT_LOCALSYSTEM]" GenericAll="yes" />
111+
<Permission User="[WIX_ACCOUNT_USERS]" GenericAll="no"/>
112+
</File>
105113
</Component>
106114
<Directory Id="logs" Name="logs">
107115
<Component Id="logs" Guid="e194d05a-6dc7-40be-a626-6a15b43c456b"

0 commit comments

Comments
 (0)