private static string InstallService()
{
// Install service
var dir = new DirectoryInfo(Path.GetDirectoryName(Utils.ExecutablePath));
var acl = dir.GetAccessControl(AccessControlSections.Access);
acl.SetAccessRule(new FileSystemAccessRule(new SecurityIdentifier(WellKnownSidType.LocalServiceSid, null), FileSystemRights.FullControl, InheritanceFlags.ObjectInherit | InheritanceFlags.ContainerInherit, PropagationFlags.None, AccessControlType.Allow));
dir.SetAccessControl(acl);
ManagedInstallerClass.InstallHelper(new string[] { Utils.ExecutablePath });
// Set permission
var sc = ServiceController.GetServices().FirstOrDefault(s => s.ServiceName == Consts.ServiceName);
if (sc == null)
{
return("Service installation failure");
}
var buffer = new byte[0];
if (!NTAPI.QueryServiceObjectSecurity(sc.ServiceHandle, SecurityInfos.DiscretionaryAcl, buffer, 0, out uint size))
{
int err = Marshal.GetLastWin32Error();
if (err != 122 && err != 0) // ERROR_INSUFFICIENT_BUFFER
{
return("QueryServiceObjectSecurity[1] error: " + err);
}
buffer = new byte[size];
if (!NTAPI.QueryServiceObjectSecurity(sc.ServiceHandle, SecurityInfos.DiscretionaryAcl, buffer, size, out size))
{
return("QueryServiceObjectSecurity[2] error: " + Marshal.GetLastWin32Error());
}
}
var rsd = new RawSecurityDescriptor(buffer, 0);
var dacl = new DiscretionaryAcl(false, false, rsd.DiscretionaryAcl);
dacl.SetAccess(AccessControlType.Allow, new SecurityIdentifier(WellKnownSidType.AuthenticatedUserSid, null), (int)(ServiceAccessRights.SERVICE_QUERY_STATUS | ServiceAccessRights.SERVICE_START | ServiceAccessRights.SERVICE_STOP | ServiceAccessRights.SERVICE_INTERROGATE), InheritanceFlags.None, PropagationFlags.None);
buffer = new byte[dacl.BinaryLength];
dacl.GetBinaryForm(buffer, 0);
rsd.DiscretionaryAcl = new RawAcl(buffer, 0);
buffer = new byte[rsd.BinaryLength];
rsd.GetBinaryForm(buffer, 0);
if (!NTAPI.SetServiceObjectSecurity(sc.ServiceHandle, SecurityInfos.DiscretionaryAcl, buffer))
{
return("SetServiceObjectSecurity error: " + Marshal.GetLastWin32Error());
}
return(null);
}
