Fix check for whether postmaster is running as a Windows service. REL9_6_STABLE
authorHeikki Linnakangas <[email protected]>
Mon, 26 Sep 2016 06:19:20 +0000 (09:19 +0300)
committerHeikki Linnakangas <[email protected]>
Mon, 26 Sep 2016 06:19:41 +0000 (09:19 +0300)
commit24e8aa323ee46b1e7a175a9fd565c0918df36240
treed610c3ca41ada6ac77e75435100cae68cda41be2
parentfc37e2afa04c612c35e33e0ce447be296ba6bb02
Fix check for whether postmaster is running as a Windows service.

If postmaster is launched with a restricted security token, with the
"Log in as Service" privilege explicitly removed, the token will contain
SECURITY_SERVICE_RID with the SE_GROUP_USE_FOR_DENY_ONLY flag, and without
the SE_GROUP_ENABLED flag. pgwin32_is_service() was fooled by that, and
thought that it's running as a service. Fix to check for the
SE_GROUP_ENABLED flag, like we do in pgwin32_is_admin().

Patch by Michael Paquier, per Breen Hagan's report and analysis. Backpatch
to all supported versions.

Bug: #13755
Discussion: <20151104062315[email protected]>
src/port/win32security.c