From: William A. Rowe Jr <wrowe@apache.org>
Date: Fri, 12 Jul 2002 18:32:27 +0000 (+0000)
Subject:   Use the bare minimum permissions required to perform a given service
X-Git-Tag: 2.0.40~250
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=e233befbcb725a433f5099d53d83dcdcb5d6105d;p=apache

  Use the bare minimum permissions required to perform a given service
  manager operation.

Submitted by: David Shane Holden <dpejesh@yahoo.com>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@96036 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/support/win32/ApacheMonitor.c b/support/win32/ApacheMonitor.c
index 4fec6ff478..3ae7da9220 100644
--- a/support/win32/ApacheMonitor.c
+++ b/support/win32/ApacheMonitor.c
@@ -780,13 +780,14 @@ BOOL ApacheManageService(LPCSTR szServiceName, LPCSTR szImagePath,
     else
     {
         schSCManager = OpenSCManager(szComputerName, NULL,
-                                     GENERIC_EXECUTE);
+                                     SC_MANAGER_CONNECT);
         if (!schSCManager) {
             return FALSE;
         }
 
         schService = OpenService(schSCManager, szServiceName, 
-                                 GENERIC_EXECUTE);
+                                 SERVICE_QUERY_STATUS | SERVICE_START | 
+                                 SERVICE_STOP | SERVICE_USER_DEFINED_CONTROL);
         if (schService != NULL)
         {
             retValue = FALSE;
@@ -937,7 +938,7 @@ BOOL IsServiceRunning(LPCSTR szServiceName, LPCSTR szComputerName,
     {
         dwPid = 0;
         schSCManager = OpenSCManager(szComputerName, NULL,
-                                     GENERIC_READ);
+                                     SC_MANAGER_CONNECT);
         if (!schSCManager) {
             return FALSE;
         }