brute force rights on temporary asp.net files

elastic · Feb 5, 2024 · eede6be · eede6be
1 parent 46f6b19
commit eede6be
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/.github/workflows/test-windows-iis.yml b/.github/workflows/test-windows-iis.yml
@@ -78,9 +78,13 @@ jobs:
       shell: cmd
       run: |
         REM enable permissions for the Application Pool Identity group
+        icacls C:\Windows\Temp /grant "IIS_IUSRS:(OI)(CI)F" /T
+        icacls "c:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files" /grant "IIS_IUSRS:(OI)(CI)F" /T
         icacls %cd% /t /q /grant "IIS_IUSRS:(OI)(CI)(IO)(RX)"
         REM enable permissions for the anonymous access group
         icacls %cd% /t /q /grant "IUSR:(OI)(CI)(IO)(RX)"
+        icacls C:\Windows\Temp /grant "IUSR:(OI)(CI)F" /T
+        icacls "c:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files" /grant "IUSR:(OI)(CI)F" /T
     
     - name: Run tests
       shell: cmd