From b2a21bec720862eb75f84f5f766279a36a111032 Mon Sep 17 00:00:00 2001
From: Cameron Gutman <aicommander@gmail.com>
Date: Sat, 9 Mar 2019 10:51:59 -0800
Subject: [PATCH] Reduce service permissions

---
 GSv6FwdSetup/Product.wxs | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/GSv6FwdSetup/Product.wxs b/GSv6FwdSetup/Product.wxs
index 5f45e66..0f9e6a9 100644
--- a/GSv6FwdSetup/Product.wxs
+++ b/GSv6FwdSetup/Product.wxs
@@ -37,10 +37,12 @@
                         DisplayName="IPv6 Forwarder for GS Protocol"
                         Description="Provides access to GameStream servers over IPv6 networks"
                         Start="auto"
-                        Account="LocalSystem"
+                        Account="NT AUTHORITY\LocalService"
                         ErrorControl="ignore"
                         Interactive="no">
-          <ServiceConfig DelayedAutoStart="yes" OnInstall="yes" OnReinstall="yes" />
+          <ServiceConfig DelayedAutoStart="yes" OnInstall="yes" OnReinstall="yes" ServiceSid="restricted">
+            <RequiredPrivilege>SeChangeNotifyPrivilege</RequiredPrivilege>
+          </ServiceConfig>
         </ServiceInstall>
         <ServiceControl Id="StartService" Start="install" Stop="both" Remove="uninstall" Name="GSv6FwdSvc" Wait="yes" />
       </Component>