Paul Higinbotham 9804aba7e1 Merged PR 8969: Disable Enter-PSHostProcess cmdlet when system in lock down mode ...

This is based on an issue, where Enter-PSHostProcess on a locked down (WDAC enforced) machine allows any admin to connect to any another local hosted PowerShell process and execute commands as that user.  This amounts to privilege escalation on the policy locked down machine and something we want to prevent.

Fix is to check for system lock down and disable Enter-PSHostProcess cmdlet with an error message.

2019-07-08 19:12:11 +00:00

..

Modules

Update tests to account for when $PSHOME is readonly (#9279)

2019-04-15 14:29:42 -07:00

TestData/CatalogTestData

Update copyright and license headers (#6134)

2018-02-13 09:23:53 -08:00

AclCmdlets.Tests.ps1

Update tests in Microsoft.PowerShell.Security folder to use Pesterv4 syntax (#6256)

2018-03-23 10:41:14 -07:00

AmsiInterface.Tests.ps1

Fix typo in AMSI test (#8561)

2018-12-29 18:16:50 +05:00

certificateCommon.psm1

Replace test certificates with self-signed certificate generating command (#7875)

2018-10-01 14:40:48 -07:00

CertificateProvider.Tests.ps1

Convert ShouldBeErrorId to Should -Throw -ErrorId in PowerShell tests (#6682)

2018-05-17 14:42:04 -07:00

CmsMessage.Tests.ps1

Replace test certificates with self-signed certificate generating command (#7875)

2018-10-01 14:40:48 -07:00

ConstrainedLanguageDebugger.Tests.ps1

Merged PR 8428: Disable debugger in System Lock down mode

2019-05-16 20:17:31 +00:00

ConstrainedLanguageModules.Tests.ps1

Port Security bypass fixes from 6.1.3 (#8915)

2019-02-21 13:44:08 -08:00

ConstrainedLanguageRestriction.Tests.ps1

Merged PR 8969: Disable Enter-PSHostProcess cmdlet when system in lock down mode

2019-07-08 19:12:11 +00:00

ConstrainedLanguageValidation.Tests.ps1

Add fix for Start-Job initialization script should not be executed as trusted in system lockdown (#8284)

2018-11-26 10:38:13 -08:00

ExecutionPolicy.Tests.ps1

Merged PR 8394: Port release automation changes into 6.2.1

2019-05-15 00:12:12 +00:00

FileCatalog.Tests.ps1

Add test for -WhatIf for New-FileCatalog (#8966)

2019-03-13 12:55:29 -07:00

GetCredential.Tests.ps1

Update tests in Microsoft.PowerShell.Security folder to use Pesterv4 syntax (#6256)

2018-03-23 10:41:14 -07:00

SecureString.Tests.ps1

Enable SecureString cmdlets for non-Windows (#9199)

2019-03-25 10:01:11 -07:00