From 6bd66d468517c79c7d61c91a80fc163d59cd06a2 Mon Sep 17 00:00:00 2001
From: Tess Gauthier <tgauth@bu.edu>
Date: Mon, 21 Mar 2022 16:13:27 -0400
Subject: [PATCH] update ssh-agent privileges to match install scripts for
 pkcs11/fido scenarios (#584)

---
 contrib/win32/install/shared.wxs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/contrib/win32/install/shared.wxs b/contrib/win32/install/shared.wxs
index 8ece01b2f..4b94e935a 100644
--- a/contrib/win32/install/shared.wxs
+++ b/contrib/win32/install/shared.wxs
@@ -63,7 +63,7 @@
         </ComponentGroup>
 
         <!-- Automatically add custom actions if referencing the Shared component group. -->
-        <SetProperty Id="SetPrivilegesOnSshAgent" Value="&quot;[SystemFolder]sc.exe&quot; privs ssh-agent SeImpersonatePrivilege" Sequence="execute" Before="SetPrivilegesOnSshAgent" />
+        <SetProperty Id="SetPrivilegesOnSshAgent" Value="&quot;[SystemFolder]sc.exe&quot; privs ssh-agent SeAssignPrimaryTokenPrivilege/SeTcbPrivilege/SeBackupPrivilege/SeRestorePrivilege/SeImpersonatePrivilege" Sequence="execute" Before="SetPrivilegesOnSshAgent" />
         <CustomAction Id="SetPrivilegesOnSshAgent" BinaryKey="WixCA" DllEntry="WixQuietExec" Execute="deferred" Return="check" Impersonate="no" />
         <InstallExecuteSequence>
             <Custom Action="SetPrivilegesOnSshAgent" After="InstallServices"><![CDATA[&Server = 3]]></Custom>