train-core 3.15.0 → 3.15.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1d838f638d6bbc471fdd186099014d342ec80ea3d208885d709351ed1564d96d
-  data.tar.gz: 4a3c73b0faed531af7e55578a94e76754a6ce408a1a6aac706bc2a05eff7b5f1
+  metadata.gz: cfb456b4c529644791361d65b1de975aa33c5b4302bd8a7eff2729c5405d3782
+  data.tar.gz: 2f9dab7bec4a54ab76556300a5cd7ffc11e31b2c11591646bfb3f4a7650b034d
 SHA512:
-  metadata.gz: 5e379c906184e37a441b6c9736b95b6fd6fa724bccba8f626b964b4342305f201b4fce792bb81e4c275b8b49036aa2cad97c0682880529029354530e6d06d121
-  data.tar.gz: 72a4cfe2de2a43d359fb63c23f48264b8b316b5513693150ac256d10a867514722b5445619571b845256aeac157feaf06ea54f36288e5f192421cf6a4cf4b487
+  metadata.gz: 5dc10d862d3aefed1096cad515f0cc3d6d00abae14386bba863eda4cb8e3ed8c069b10730cdd15f17f9810addb34d6d09bcab2c63af778cef3f53a7c8b3ec8bc
+  data.tar.gz: 4176d5379882be149af2c5286b2523dd7cc7fecc7e8db727cb3b348a59efa1f3c241b8f26d11232f302c87c6c5d1888cbd59a107033f18ed774e7e662dfcd779

data/lib/train/transports/local.rb

@@ -230,12 +230,6 @@ module Train::Transports
 
           pipe = nil
 
-          # Verify ownership before connecting
-          owner, current_user, is_owner = pipe_owned_by_current_user?(pipe_name)
-          unless is_owner
-            raise PipeError, "Unauthorized user '#{current_user}' tried to connect to pipe '#{pipe_name}'. Pipe is owned by '#{owner}'."
-          end
-
           # PowerShell needs time to create pipe.
           100.times do
             pipe = open("//./pipe/#{pipe_name}", "r+")
@@ -252,11 +246,8 @@ module Train::Transports
 
           script = <<-EOF
             $ErrorActionPreference = 'Stop'
-            $user = [System.Security.Principal.WindowsIdentity]::GetCurrent().Name
-            $pipeSecurity = New-Object System.IO.Pipes.PipeSecurity
-            $rule = New-Object System.IO.Pipes.PipeAccessRule($user, "FullControl", "Allow")
-            $pipeSecurity.AddAccessRule($rule)
-            $pipeServer = New-Object System.IO.Pipes.NamedPipeServerStream('#{pipe_name}', [System.IO.Pipes.PipeDirection]::InOut, 1, [System.IO.Pipes.PipeTransmissionMode]::Byte, [System.IO.Pipes.PipeOptions]::None, 4096, 4096, $pipeSecurity)
+
+            $pipeServer = New-Object System.IO.Pipes.NamedPipeServerStream('#{pipe_name}')
             $pipeReader = New-Object System.IO.StreamReader($pipeServer)
             $pipeWriter = New-Object System.IO.StreamWriter($pipeServer)
 
@@ -297,29 +288,6 @@ module Train::Transports
           cmd = "#{@powershell_cmd} -NoProfile -ExecutionPolicy bypass -NonInteractive -EncodedCommand #{base64_script}"
           Process.create(command_line: cmd).process_id
         end
-
-        def current_windows_user
-          user = `powershell -Command "[System.Security.Principal.WindowsIdentity]::GetCurrent().Name"`.strip
-          if user.nil? || user.empty?
-            user = `whoami`.strip
-          end
-          if user.nil? || user.empty?
-            raise "Unable to determine current Windows user"
-          end
-
-          user
-        end
-
-        # Verify pipe ownership before connecting
-        def pipe_owned_by_current_user?(pipe_name)
-          exists = `powershell -Command "Test-Path \\\\.\\pipe\\#{pipe_name}"`.strip.downcase == "true"
-          current_user = current_windows_user
-          return [nil, current_user, false] unless exists
-
-          owner = `powershell -Command "(Get-Acl \\\\.\\pipe\\#{pipe_name}).Owner" 2>&1`.strip
-          is_owner = !owner.nil? && !current_user.nil? && owner.casecmp(current_user) == 0
-          [owner, current_user, is_owner]
-        end
       end
     end
   end

data/lib/train/version.rb

@@ -2,5 +2,5 @@
 # Author:: Dominik Richter (<dominik.richter@gmail.com>)
 
 module Train
-  VERSION = "3.15.0".freeze
+  VERSION = "3.15.1".freeze
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: train-core
 version: !ruby/object:Gem::Version
-  version: 3.15.0
+  version: 3.15.1
 platform: ruby
 authors:
 - Chef InSpec Team
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2025-12-22 00:00:00.000000000 Z
+date: 2025-12-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: addressable