diff options
| author | Jordan Borean <jborean93@gmail.com> | 2024-09-13 06:25:58 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2024-09-13 06:25:58 +0200 |
| commit | b5ae8a382baca04442ad82e654ab6e35379844c3 (patch) | |
| tree | 43354e41379ed1d4420fc0ed721bf7e8ed0f1d19 /.github | |
| parent | file module: Clarify the docs that the force parameter works for hardlinks to... (diff) | |
| download | ansible-b5ae8a382baca04442ad82e654ab6e35379844c3.tar.xz ansible-b5ae8a382baca04442ad82e654ab6e35379844c3.zip | |
runas - create new SYTEM token for become (#83827)
Instead of re-using the token used in impersonation, this change will
create a new token for the SYSTEM account as returned by LogonUser. The
benefits of this is that the token will contain the full privileges for
the SYSTEM account rather than potentially one that has restricted
privileges we used during impersonation. It should also help avoid
problems on Windows that fails on status 0x0000016F when the
impersonated token during become was from a process that is restricted
from creating sub processes.
Diffstat (limited to '.github')
0 files changed, 0 insertions, 0 deletions