[JIRA] (SSPCPP-961) Shibboleth SP - Windows - possible Privilege Escalation

[Scott Cantor (Jira)]

Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 ) *commented* on SSPCPP-961 ( https://shibboleth.atlassian.net/browse/SSPCPP-961?atlOrigin=eyJpIjoiNzQzNGI0NmZhZDA5NDRhOGEzYzRjYmQzY2NjZjRmODUiLCJwIjoiaiJ9 )

Re: Shibboleth SP - Windows - possible Privilege Escalation ( https://shibboleth.atlassian.net/browse/SSPCPP-961?atlOrigin=eyJpIjoiNzQzNGI0NmZhZDA5NDRhOGEzYzRjYmQzY2NjZjRmODUiLCJwIjoiaiJ9 )

I’ve corrected the installation documentation for Windows and adjusted the inaccurate note about the installer doing anything special in this area. If we end up doing something, we’ll update that to take it into account.

Officially, the docs are correct now; we don’t do this for you and so it’s entirely a deployer matter to harden the system. That’s always been the case.

( https://shibboleth.atlassian.net/browse/SSPCPP-961#add-comment?atlOrigin=eyJpIjoiNzQzNGI0NmZhZDA5NDRhOGEzYzRjYmQzY2NjZjRmODUiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/SSPCPP-961#add-comment?atlOrigin=eyJpIjoiNzQzNGI0NmZhZDA5NDRhOGEzYzRjYmQzY2NjZjRmODUiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100210- sha1:28a3636 )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20221115/b77df1f7/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-54d23e69-39f4-4ac2-affd-4cff104eb4fa
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20221115/b77df1f7/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-61a9c146-e27e-4ea7-8b07-cf34c923a508
Type: image/png
Size: 425 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20221115/b77df1f7/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-7532069b-7b5a-46dc-821a-4de03f2afb78
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20221115/b77df1f7/attachment-0005.png>