167 lines
8.0 KiB
PowerShell
167 lines
8.0 KiB
PowerShell
#Function to make actions post WAU update
|
|
|
|
function Invoke-PostUpdateActions {
|
|
|
|
#log
|
|
Write-Log "Running Post Update actions..." "yellow"
|
|
|
|
#Reset Winget Sources
|
|
$ResolveWingetPath = Resolve-Path "$env:programfiles\WindowsApps\Microsoft.DesktopAppInstaller_*_*__8wekyb3d8bbwe\winget.exe" | Sort-Object { [version]($_.Path -replace '^[^\d]+_((\d+\.)*\d+)_.*', '$1') }
|
|
if ($ResolveWingetPath) {
|
|
#If multiple version, pick last one
|
|
$WingetPath = $ResolveWingetPath[-1].Path
|
|
& $WingetPath source reset --force
|
|
|
|
#log
|
|
Write-Log "-> Winget sources reseted." "green"
|
|
}
|
|
|
|
#Create WAU Regkey if not present
|
|
$regPath = "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Winget-AutoUpdate"
|
|
if (!(test-path $regPath)) {
|
|
New-Item $regPath -Force
|
|
New-ItemProperty $regPath -Name DisplayName -Value "Winget-AutoUpdate (WAU)" -Force
|
|
New-ItemProperty $regPath -Name DisplayIcon -Value "C:\Windows\System32\shell32.dll,-16739" -Force
|
|
New-ItemProperty $regPath -Name NoModify -Value 1 -Force
|
|
New-ItemProperty $regPath -Name NoRepair -Value 1 -Force
|
|
New-ItemProperty $regPath -Name Publisher -Value "Romanitho" -Force
|
|
New-ItemProperty $regPath -Name URLInfoAbout -Value "https://github.com/Romanitho/Winget-AutoUpdate" -Force
|
|
New-ItemProperty $regPath -Name InstallLocation -Value $WorkingDir -Force
|
|
New-ItemProperty $regPath -Name UninstallString -Value "powershell.exe -noprofile -executionpolicy bypass -file `"$WorkingDir\WAU-Uninstall.ps1`"" -Force
|
|
New-ItemProperty $regPath -Name QuietUninstallString -Value "powershell.exe -noprofile -executionpolicy bypass -file `"$WorkingDir\WAU-Uninstall.ps1`"" -Force
|
|
New-ItemProperty $regPath -Name WAU_UpdatePrerelease -Value 0 -PropertyType DWord -Force
|
|
|
|
#log
|
|
Write-Log "-> $regPath created." "green"
|
|
}
|
|
#Fix Notif where WAU_NotificationLevel is not set
|
|
$regNotif = Get-ItemProperty $regPath -Name WAU_NotificationLevel -ErrorAction SilentlyContinue
|
|
if (!$regNotif) {
|
|
New-ItemProperty $regPath -Name WAU_NotificationLevel -Value Full -Force
|
|
|
|
#log
|
|
Write-Log "-> Notification level setting was missing. Fixed with 'Full' option."
|
|
}
|
|
|
|
#Set WAU_MaxLogFiles/WAU_MaxLogSize if not set
|
|
$MaxLogFiles = Get-ItemProperty $regPath -Name WAU_MaxLogFiles -ErrorAction SilentlyContinue
|
|
if (!$MaxLogFiles) {
|
|
New-ItemProperty $regPath -Name WAU_MaxLogFiles -Value 3 -PropertyType DWord -Force | Out-Null
|
|
New-ItemProperty $regPath -Name WAU_MaxLogSize -Value 1048576 -PropertyType DWord -Force | Out-Null
|
|
|
|
#log
|
|
Write-Log "-> MaxLogFiles/MaxLogSize setting was missing. Fixed with 3/1048576 (in bytes, default is 1048576 = 1 MB)."
|
|
}
|
|
|
|
#Security: Mods directory must be protected (Users could create scripts of their own - then they're run in System Context)!
|
|
#Check if Local Users have write rights in Mods directory or not
|
|
$WingetUpdatePath = Get-ItemProperty $regPath -Name InstallLocation -ErrorAction SilentlyContinue
|
|
$directory = Get-Item -Path "$WingetUpdatePath\mods"
|
|
$acl = Get-Acl -Path $directory.FullName
|
|
#Local Users - S-1-5-32-545
|
|
$userSID = New-Object System.Security.Principal.SecurityIdentifier("S-1-5-32-545")
|
|
#Translate SID to Locale Name
|
|
$ntAccount = $userSID.Translate([System.Security.Principal.NTAccount])
|
|
$userName = $ntAccount.Value
|
|
$userRights = [System.Security.AccessControl.FileSystemRights]"Write"
|
|
|
|
$hasWriteAccess = $False
|
|
|
|
foreach ($access in $acl.Access) {
|
|
if ($access.IdentityReference.Value -eq $userName -and $access.FileSystemRights -eq $userRights) {
|
|
$hasWriteAccess = $True
|
|
break
|
|
}
|
|
}
|
|
|
|
if ($hasWriteAccess) {
|
|
#Disable inheritance
|
|
$acl.SetAccessRuleProtection($True, $True)
|
|
# Remove any existing rules
|
|
$acl.Access | ForEach-Object { $acl.RemoveAccessRule($_) }
|
|
#SYSTEM Full - S-1-5-18
|
|
$userSID = New-Object System.Security.Principal.SecurityIdentifier("S-1-5-18")
|
|
$rule = New-Object System.Security.AccessControl.FileSystemAccessRule($userSID,"FullControl","ContainerInherit,ObjectInherit","None","Allow")
|
|
$acl.SetAccessRule($rule)
|
|
# Save the updated ACL
|
|
Set-Acl -Path $directory.FullName -AclObject $acl
|
|
|
|
#Administrators Full - S-1-5-32-544
|
|
$acl = Get-Acl -Path $directory.FullName
|
|
$userSID = New-Object System.Security.Principal.SecurityIdentifier("S-1-5-32-544")
|
|
$rule = New-Object System.Security.AccessControl.FileSystemAccessRule($userSID,"FullControl","ContainerInherit,ObjectInherit","None","Allow")
|
|
$acl.SetAccessRule($rule)
|
|
Set-Acl -Path $directory.FullName -AclObject $acl
|
|
|
|
#Local Users ReadAndExecute - S-1-5-32-545 S-1-5-11
|
|
$acl = Get-Acl -Path $directory.FullName
|
|
$userSID = New-Object System.Security.Principal.SecurityIdentifier("S-1-5-32-545")
|
|
$rule = New-Object System.Security.AccessControl.FileSystemAccessRule($userSID, "ReadAndExecute","ContainerInherit,ObjectInherit","None","Allow")
|
|
$acl.SetAccessRule($rule)
|
|
Set-Acl -Path $directory.FullName -AclObject $acl
|
|
|
|
#Authenticated Users ReadAndExecute - S-1-5-11
|
|
$acl = Get-Acl -Path $directory.FullName
|
|
$userSID = New-Object System.Security.Principal.SecurityIdentifier("S-1-5-11")
|
|
$rule = New-Object System.Security.AccessControl.FileSystemAccessRule($userSID, "ReadAndExecute","ContainerInherit,ObjectInherit","None","Allow")
|
|
$acl.SetAccessRule($rule)
|
|
Set-Acl -Path $directory.FullName -AclObject $acl
|
|
}
|
|
|
|
#Convert about.xml if exists (previous WAU versions) to reg
|
|
$WAUAboutPath = "$WorkingDir\config\about.xml"
|
|
if (test-path $WAUAboutPath) {
|
|
[xml]$About = Get-Content $WAUAboutPath -Encoding UTF8 -ErrorAction SilentlyContinue
|
|
New-ItemProperty $regPath -Name DisplayVersion -Value $About.app.version -Force
|
|
New-ItemProperty $regPath -Name VersionMajor -Value ([version]$About.app.version).Major -Force
|
|
New-ItemProperty $regPath -Name VersionMinor -Value ([version]$About.app.version).Minor -Force
|
|
|
|
#Remove file once converted
|
|
Remove-Item $WAUAboutPath -Force -Confirm:$false
|
|
|
|
#log
|
|
Write-Log "-> $WAUAboutPath converted." "green"
|
|
}
|
|
|
|
#Convert config.xml if exists (previous WAU versions) to reg
|
|
$WAUConfigPath = "$WorkingDir\config\config.xml"
|
|
if (test-path $WAUConfigPath) {
|
|
[xml]$Config = Get-Content $WAUConfigPath -Encoding UTF8 -ErrorAction SilentlyContinue
|
|
if ($Config.app.WAUautoupdate -eq "False") { New-ItemProperty $regPath -Name WAU_DisableAutoUpdate -Value 1 -Force }
|
|
if ($Config.app.NotificationLevel) { New-ItemProperty $regPath -Name WAU_NotificationLevel -Value $Config.app.NotificationLevel -Force }
|
|
if ($Config.app.UseWAUWhiteList -eq "True") { New-ItemProperty $regPath -Name WAU_UseWhiteList -Value 1 -PropertyType DWord -Force }
|
|
if ($Config.app.WAUprerelease -eq "True") { New-ItemProperty $regPath -Name WAU_UpdatePrerelease -Value 1 -PropertyType DWord -Force }
|
|
|
|
#Remove file once converted
|
|
Remove-Item $WAUConfigPath -Force -Confirm:$false
|
|
|
|
#log
|
|
Write-Log "-> $WAUConfigPath converted." "green"
|
|
}
|
|
|
|
#Remove old functions
|
|
$FileNames = @(
|
|
"$WorkingDir\functions\Get-WAUConfig.ps1",
|
|
"$WorkingDir\functions\Get-WAUCurrentVersion.ps1",
|
|
"$WorkingDir\functions\Get-WAUUpdateStatus.ps1"
|
|
)
|
|
foreach ($FileName in $FileNames) {
|
|
if (Test-Path $FileName) {
|
|
Remove-Item $FileName -Force -Confirm:$false
|
|
|
|
#log
|
|
Write-Log "-> $FileName removed." "green"
|
|
}
|
|
}
|
|
|
|
#Reset WAU_UpdatePostActions Value
|
|
$WAUConfig | New-ItemProperty -Name WAU_PostUpdateActions -Value 0 -Force
|
|
|
|
#Get updated WAU Config
|
|
$Script:WAUConfig = Get-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Winget-AutoUpdate"
|
|
|
|
#log
|
|
Write-Log "Post Update actions finished" "green"
|
|
|
|
}
|