Grant Built-in-Users to log event to channels (#339)

Fix of PowerShell/Win32-OpenSSH#1174 to grant non-admin permission to log events
Change the file type to text so it will show the diff in the future
This commit is contained in:
Yanbing 2018-08-11 00:45:48 -07:00 committed by GitHub
parent 38fc68a21b
commit 48e0cdbd5f
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 67 additions and 61 deletions

View File

@ -1,61 +1,67 @@
<?xml version="1.0" encoding="utf-8"?> <?xml version="1.0" encoding="utf-8"?>
<instrumentationManifest xsi:schemaLocation="http://schemas.microsoft.com/win/2004/08/events eventman.xsd" xmlns="http://schemas.microsoft.com/win/2004/08/events" xmlns:win="http://manifests.microsoft.com/win/2004/08/windows/events" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:trace="http://schemas.microsoft.com/win/2004/08/events/trace"> <instrumentationManifest xsi:schemaLocation="http://schemas.microsoft.com/win/2004/08/events eventman.xsd" xmlns="http://schemas.microsoft.com/win/2004/08/events" xmlns:win="http://manifests.microsoft.com/win/2004/08/windows/events" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:trace="http://schemas.microsoft.com/win/2004/08/events/trace">
<instrumentation> <instrumentation>
<events> <events>
<provider name="OpenSSH" guid="{C4B57D35-0636-4BC3-A262-370F249F9802}" symbol="OpenSSH" resourceFileName="%windir%\system32\openssh\ssh-agent.exe" messageFileName="%windir%\system32\openssh\ssh-agent.exe"> <provider name="OpenSSH" guid="{C4B57D35-0636-4BC3-A262-370F249F9802}" symbol="OpenSSH" resourceFileName="%windir%\system32\openssh\ssh-agent.exe" messageFileName="%windir%\system32\openssh\ssh-agent.exe">
<events> <events>
<event symbol="CRITICAL_Event" value="1" version="0" channel="OpenSSH/Admin" level="win:Critical" template="2StrTemplate" message="$(string.OpenSSH.event.message)"> <event symbol="CRITICAL_Event" value="1" version="0" channel="OpenSSH/Admin" level="win:Critical" template="2StrTemplate" message="$(string.OpenSSH.event.message)">
</event> </event>
<event symbol="ERROR_Event" value="2" version="0" channel="OpenSSH/Admin" level="win:Error" template="2StrTemplate" message="$(string.OpenSSH.event.message)"> <event symbol="ERROR_Event" value="2" version="0" channel="OpenSSH/Admin" level="win:Error" template="2StrTemplate" message="$(string.OpenSSH.event.message)">
</event> </event>
<event symbol="WARNING_Event" value="3" version="0" channel="OpenSSH/Operational" level="win:Warning" template="2StrTemplate" message="$(string.OpenSSH.event.message)"> <event symbol="WARNING_Event" value="3" version="0" channel="OpenSSH/Operational" level="win:Warning" template="2StrTemplate" message="$(string.OpenSSH.event.message)">
</event> </event>
<event symbol="INFO_Event" value="4" version="0" channel="OpenSSH/Operational" level="win:Informational" template="2StrTemplate" message="$(string.OpenSSH.event.message)"> <event symbol="INFO_Event" value="4" version="0" channel="OpenSSH/Operational" level="win:Informational" template="2StrTemplate" message="$(string.OpenSSH.event.message)">
</event> </event>
<event symbol="DEBUG_Event" value="6" version="0" channel="OpenSSH/Debug" level="Debug" template="2StrTemplate" message="$(string.OpenSSH.event.message)"> <event symbol="DEBUG_Event" value="6" version="0" channel="OpenSSH/Debug" level="Debug" template="2StrTemplate" message="$(string.OpenSSH.event.message)">
</event> </event>
</events> </events>
<levels> <levels>
<level name="Debug" symbol="Debug" value="16" message="$(string.OpenSSH.level.Debug.message)"> <level name="Debug" symbol="Debug" value="16" message="$(string.OpenSSH.level.Debug.message)">
</level> </level>
</levels> </levels>
<channels> <channels>
<channel name="OpenSSH/Admin" chid="OpenSSH/Admin" symbol="OpenSSH_Admin" type="Admin" enabled="true"> <channel
</channel> access="O:BAG:BAD:(A;;0x2;;;BU)(A;;0x2;;;S-1-15-2-1)(A;;0x2;;;S-1-15-3-1024-3153509613-960666767-3724611135-2725662640-12138253-543910227-1950414635-4190290187)(A;;0xf0007;;;SY)(A;;0x7;;;BA)(A;;0x7;;;SO)(A;;0x3;;;IU)(A;;0x3;;;SU)(A;;0x3;;;S-1-5-3)(A;;0x3;;;S-1-5-33)(A;;0x1;;;S-1-5-32-573)"
<channel name="OpenSSH/Operational" chid="OpenSSH/Operational" symbol="OpenSSH_Operational" type="Operational" enabled="true"> isolation="Custom" name="OpenSSH/Admin" chid="OpenSSH/Admin" symbol="OpenSSH_Admin" type="Admin" enabled="true">
</channel> </channel>
<channel name="OpenSSH/Debug" chid="OpenSSH/Debug" symbol="OpenSSH_Debug" type="Debug" enabled="false"> <channel
</channel> access="O:BAG:BAD:(A;;0x2;;;BU)(A;;0x2;;;S-1-15-2-1)(A;;0x2;;;S-1-15-3-1024-3153509613-960666767-3724611135-2725662640-12138253-543910227-1950414635-4190290187)(A;;0xf0007;;;SY)(A;;0x7;;;BA)(A;;0x7;;;SO)(A;;0x3;;;IU)(A;;0x3;;;SU)(A;;0x3;;;S-1-5-3)(A;;0x3;;;S-1-5-33)(A;;0x1;;;S-1-5-32-573)"
</channels> isolation="Custom" name="OpenSSH/Operational" chid="OpenSSH/Operational" symbol="OpenSSH_Operational" type="Operational" enabled="true">
<templates> </channel>
<template tid="2StrTemplate"> <channel
<data name="process" inType="win:UnicodeString" outType="xs:string"> access="O:BAG:BAD:(A;;0x2;;;BU)(A;;0x2;;;S-1-15-2-1)(A;;0x2;;;S-1-15-3-1024-3153509613-960666767-3724611135-2725662640-12138253-543910227-1950414635-4190290187)(A;;0xf0007;;;SY)(A;;0x7;;;BA)(A;;0x7;;;SO)(A;;0x3;;;IU)(A;;0x3;;;SU)(A;;0x3;;;S-1-5-3)(A;;0x3;;;S-1-5-33)(A;;0x1;;;S-1-5-32-573)"
</data> isolation="Custom" name="OpenSSH/Debug" chid="OpenSSH/Debug" symbol="OpenSSH_Debug" type="Debug" enabled="false">
<data name="payload" inType="win:UnicodeString" outType="xs:string"> </channel>
</data> </channels>
</template> <templates>
</templates> <template tid="2StrTemplate">
</provider> <data name="process" inType="win:UnicodeString" outType="xs:string">
</events> </data>
</instrumentation> <data name="payload" inType="win:UnicodeString" outType="xs:string">
<localization> </data>
<resources culture="en-US"> </template>
<stringTable> </templates>
<string id="level.Warning" value="Warning"> </provider>
</string> </events>
<string id="level.Verbose" value="Verbose"> </instrumentation>
</string> <localization>
<string id="level.Informational" value="Information"> <resources culture="en-US">
</string> <stringTable>
<string id="level.Error" value="Error"> <string id="level.Warning" value="Warning">
</string> </string>
<string id="level.Critical" value="Critical"> <string id="level.Verbose" value="Verbose">
</string> </string>
<string id="OpenSSH.level.Debug.message" value="Debug"> <string id="level.Informational" value="Information">
</string> </string>
<string id="OpenSSH.event.message" value="%1: %2"> <string id="level.Error" value="Error">
</string> </string>
</stringTable> <string id="level.Critical" value="Critical">
</resources> </string>
</localization> <string id="OpenSSH.level.Debug.message" value="Debug">
</instrumentationManifest> </string>
<string id="OpenSSH.event.message" value="%1: %2">
</string>
</stringTable>
</resources>
</localization>
</instrumentationManifest>