CC @alexbrainman @ianlancetaylor

CC @bufflig

@powersj

I chose SERVICE_ALL_ACCESS because I did need to start and stop services. And that is what majority of this code users would need too.

We could have pass dwDesiredAccess parameter to Connect and OpenService, but then everyone would have to pass SERVICE_ALL_ACCESS in these calls. And we, probably, could not change Connect and OpenService API anyway.

I am not keen on adding new APIs similar to Connect and OpenService but with extra dwDesiredAccess parameter either. The API in that package is already big enough. Can you just clone and change the code?

Thank you.

Alex

@alexbrainman,

Short of shelling out and running sc query, are there any other APIs you might be aware of that get the status of Windows Services without full permissions? We are using this in Telegraf and wanted to limit the access since all we are doing is getting status.

Thanks!

are there any other APIs you might be aware of that get the status of Windows Services without full permissions?

Yes, you can copy whatever code you need out of golang.org/x/sys/windows/svc/mgr package (and replace SERVICE_ALL_ACCESS with whatever const works for your case).

You say status of Windows Services, so I suspect you want to start with this function

https://pkg.go.dev/golang.org/x/sys@v0.0.0-20211004093028-2c5d950f24ef/windows/svc/mgr#Service.Query

and then remove all the code you don't need.

Alternatively you can just keep whole golang.org/x/sys/windows/svc/mgr package and just replace SERVICE_ALL_ACCESS with whatever value you like.

Perhaps I don't understand your question. If so, then try again.

Alex

Ah thanks for detailing that, let me talk it over with the team. I will go ahead and close this as it does not sound like this would happen upstream.

Thanks again!