dsccommunity / SecurityPolicyDsc

A wrapper around secedit.exe to configure local security policies
MIT License
177 stars 53 forks source link

SecurityOption: fix NTLM Security Option Names #115

Closed hackjammer closed 5 years ago

hackjammer commented 5 years ago

Pull Request (PR) description

The mapping of the Network Security: Restrict NTLM security options to the underlying reg keys was wrong - this has now been fixed.

Not marking this as a breaking change as I expect it would have been found before if anyone tried to use it!

This Pull Request (PR) fixes the following issues

None

Task list


This change is Reviewable

hackjammer commented 5 years ago

Any chance of getting this into the March DSC resource kit release? @kwirkykat

Thanks!

gaelcolas commented 5 years ago

Hey @hackjammer, thanks for the contribution. Will review this and try to release within next resource kit. ;)

gaelcolas commented 5 years ago

I'm happy for the changes, although I see this as a breaking change, and should be labelled as such.

You are indeed fixing a bug, and your changes now are configuring the appropriate restriction/audit, but users could have a production impact if they've had implemented a restriction without testing it (hence getting only an audit), and would now move to your patched version thinking it's a minor update (and from that update, starting to actually restrict).

I'll review the files, suggest a new wording for the releasing notes, and we can get this merged soon.

gaelcolas commented 5 years ago

After consultation, I'm not flagging this as a breaking change for the following reasons:

Waiting for the build to complete before merging.

codecov-io commented 5 years ago

Codecov Report

Merging #115 into dev will not change coverage. The diff coverage is n/a.

Impacted file tree graph

@@        Coverage Diff         @@
##           dev   #115   +/-   ##
==================================
  Coverage   89%    89%           
==================================
  Files        5      5           
  Lines      493    493           
==================================
  Hits       443    443           
  Misses      50     50