From c8de19a3b6842d919c23b643581c539bbfa80796 Mon Sep 17 00:00:00 2001
From: Cameron Gutman <aicommander@gmail.com>
Date: Sat, 9 Mar 2019 15:02:14 -0800
Subject: [PATCH] Reduce service permissions

---
 mish/Product.wxs | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/mish/Product.wxs b/mish/Product.wxs
index aa8a56f..f19fcd0 100644
--- a/mish/Product.wxs
+++ b/mish/Product.wxs
@@ -44,10 +44,12 @@
                         DisplayName="Moonlight Internet Streaming Service"
                         Description="Automatically manages router port forwarding rules required to use Moonlight over the Internet"
                         Start="auto"
-                        Account="LocalSystem"
+                        Account="NT AUTHORITY\LocalService"
                         ErrorControl="ignore"
                         Interactive="no">
-          <ServiceConfig DelayedAutoStart="no" OnInstall="yes" OnReinstall="yes" />
+          <ServiceConfig DelayedAutoStart="no" OnInstall="yes" OnReinstall="yes" ServiceSid="restricted">
+            <RequiredPrivilege>SeChangeNotifyPrivilege</RequiredPrivilege>
+          </ServiceConfig>
         </ServiceInstall>
         <ServiceControl Id="StartService" Start="install" Stop="both" Remove="uninstall" Name="MISS" Wait="yes" />
       </Component>