refactor(server): extract shared runtime and implement service install/run in arbiter-server.exe #44

Open
CleverWild wants to merge 6 commits from win-service into main
Showing only changes of commit 64a07e0ed6 - Show all commits

View File

@@ -203,8 +203,9 @@ fn ensure_admin_rights() -> miette::Result<()> {
}
fn ensure_token_acl_contract(data_dir: &Path) -> miette::Result<()> {
// IMPORTANT: This ACL setup is intentionally explicit and should not be simplified away,
// because service-account and interactive-user access requirements are different in production.
// IMPORTANT: Keep this ACL setup explicit.
// The service account needs write access, while the interactive user only needs read access
// to the bootstrap token and service data directory.
let target = data_dir.as_os_str();
CleverWild marked this conversation as resolved
Review

clarify meaning of this in comment

clarify meaning of this in comment
let status = Command::new("icacls")