Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Security] Fix HKEY_LOCAL_MACHINE\SOFTWARE\OpenSSH registry permissions #1754

Closed
bagajjal opened this issue Mar 18, 2021 · 0 comments
Closed

[Security] Fix HKEY_LOCAL_MACHINE\SOFTWARE\OpenSSH registry permissions #1754

bagajjal opened this issue Mar 18, 2021 · 0 comments
Assignees
@bagajjal
Milestone
V8.6.0.0

Comments

@bagajjal
Copy link
Collaborator

Currently, "authenticated users" have setValue permissions for HKEY_LOCAL_MACHINE\SOFTWARE\OpenSSH, HKEY_LOCAL_MACHINE\SOFTWARE\OpenSSH\Agent registry entries.

This is not desirable behavior as "authenticated users" can change the configuration like DefaultShell.

New change -
HKEY_LOCAL_MACHINE\SOFTWARE\OpenSSH - Full control to local system account, administrators group and readonly to the "authenticated users"
HKEY_LOCAL_MACHINE\SOFTWARE\OpenSSH\Agent - Full control to local system account, administrators group.
@bagajjal bagajjal self-assigned this Mar 18, 2021
@bagajjal bagajjal added this to the V8.5.0.0 milestone Mar 18, 2021
@bagajjal bagajjal mentioned this issue Mar 18, 2021
Merged
@bagajjal bagajjal changed the title Fix HKEY_LOCAL_MACHINE\SOFTWARE\OpenSSH registry permissions [Security] Fix HKEY_LOCAL_MACHINE\SOFTWARE\OpenSSH registry permissions May 14, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@bagajjal bagajjal

Labels
None yet
Projects
None yet
Milestone
V8.6.0.0
Development

No branches or pull requests
1 participant
@bagajjal