| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
| |
Fixes 8630
|
|
|
|
| |
Fixes 8134
|
|
|
|
|
|
| |
folder
Fixes 8078
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
When running elevated, Burn uses the Windows Temp folder as its working folder
to prevent normal processes from tampering with the files. Windows Temp does
allow non-elevated processes to write to the folder but they cannot see the
files there. Unfortunately, contrary to our belief, non-elevated processes
can read the files in Windows Temp by watching for directory changes. This
allows a malicious process to lie in wait, watching the Windows Temp folder
until a Burn process is launched elevated, then attack the working folder.
Mitigate that attack by protecting the working folder to only elevated users.
Managed custom actions also fall back to using the Windows Temp folder in
some cases and thus can be exposed in a similar fashion as an elevated Burn
process. Remove that possibility.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
When deleting directories recursively, an elevated custom action
following junctions in a user-writable location could recurse into
any directory, including some that you might not want to be deleted.
Therefore, avoid recursing into directories that are actually
junctions (aka "reparse points").
This applies to:
- The RemoveFoldersEx custom action (which doesn't actually do deletions
but would instruct elevated MSI to delete on your behalf).
- DTF's custom action runner.
|
| |
|
| |
|
|
|
|
| |
WixToolset.Dtf.WindowsInstaller.Linq.Entities.RemoveFile_
|
|
|
|
|
| |
- Also fix typo.
- Make WiX source file parseable.
|
| |
|
|
|
|
|
|
|
| |
Trying to pack the CA assembly before it is built reports erroneous
or redundant error messages so don't do that.
Fixes 6968
|
|
|
|
| |
Fixes 6944
|
|
|
|
| |
Fixes wixtoolset/issues#4688
|
|
|
|
|
|
|
|
|
|
| |
Lots of refactoring to bring the SFX tooling back into the 'dtf'
layer since they are (in the end) tightly coupled to some DTF
assemblies. Also refactored the DTF tests into their own folder
and added a couple integration tests to build using the new CA/UI
NuGet package.
Closes wixtoolset/issues#6080
|
| |
|
|
|
|
| |
Tests are not run inside of traversal projects so that skipped test warnings don't fail the build.
|
| |
|
|
|
|
| |
- Use VS2022/v143 libraries exclusively. C++ compatibility works.
|
|
|
|
|
|
|
| |
Update v4.0 projects to target v4.7.2.
Skip all Bal managed host tests for now.
Remove ToolsVersion from DTF test projects.
Remove Microsoft.NETFramework.ReferenceAssemblies from Directory.Packages.props.
|
| |
|
| |
|
| |
|
|
|