Files
PowerShell-PowerShell/test/powershell/Modules/Microsoft.PowerShell.Security
Paul Higinbotham 121578f17d Merged PR 8968: Disable Enter-PSHostProcess cmdlet when system in lock down mode
Enter-PSHostProcess on a locked down (WDAC enforced) machine allows any admin to connect to any another local hosted PowerShell process and execute commands as that user.  This amounts to privilege escalation on the policy locked down machine and something we want to prevent.

Fix is to check for system lock down and disable Enter-PSHostProcess cmdlet with an error message.
2019-07-08 18:10:14 +00:00
..