Add known mark to identity, fix credentials comparison bugs

This commit is contained in:
Theodor S. Midtlien
2026-09-08 12:01:30 +02:00
parent 8238e08597
commit b2f7eacd34
21 changed files with 350 additions and 144 deletions
+4 -4
View File
@@ -44,18 +44,18 @@ func userCtx() context.Context { return ctxWithIdentity(unprivilegedIdentity())
func privilegedIdentity() ipcauth.Identity {
if runtime.GOOS == "windows" {
// LocalSystem, which is what the Windows service account is.
return ipcauth.Identity{SID: "S-1-5-18"}
return ipcauth.KnownForTest(ipcauth.Identity{SID: "S-1-5-18"})
}
return ipcauth.Identity{UID: 0}
return ipcauth.KnownForTest(ipcauth.Identity{UID: 0})
}
func unprivilegedIdentity() ipcauth.Identity {
if runtime.GOOS == "windows" {
// A plain user SID: no groups, so no BUILTIN\Administrators, and not
// elevated.
return ipcauth.Identity{SID: "S-1-5-21-1-2-3-1001"}
return ipcauth.KnownForTest(ipcauth.Identity{SID: "S-1-5-21-1-2-3-1001"})
}
return ipcauth.Identity{UID: unprivUID, GID: unprivUID}
return ipcauth.KnownForTest(ipcauth.Identity{UID: unprivUID, GID: unprivUID})
}
func noIdentityCtx() context.Context { return context.Background() }