fslogix redirection - not secured configuration

Hello 

When using fslogix redirections, nerdio creates C:\FSLogix-Redirections to store xml file.

Unfortunately by default Authenticated users has write permissions to that folder (permissions inherited from c:\), and regular users can change fslogix redirections settings for ass users.

fix that should be implemented:

$outputDirectory = "c:\FSLogix-Redirections"
if (-not (Test-Path -Path $outputDirectory)) {
   New-Item -Path $outputDirectory -ItemType Directory -Force
}

cmd /c "icacls c:\FSLogix-Redirections /inheritance:d"
cmd /c "icacls c:\FSLogix-Redirections /remove ""Authenticated users"""

 

Another topic;

Nerdio should allow to set custom path for this file.

 

2

Comments (1 comment)

0
Avatar
Raul Morales

Hi Marek Sokół, thank you for raising this - we will investigate adding stronger security baselines as well as the ability to configure the custom path to store this file. 
Thank you!

Please sign in to leave a comment.