Does servicepulse need to be running? Its being flagged on our security scans. It is using the Local Service account for logon.
The security alert says:
Path : c:\program files (x86)\particular software\servicepulse\servicepulse.host.exe
Used by services : Particular.ServicePulse
File write allowed for groups : Everyone
Full control of directory allowed for groups : Everyone
It kind of helps, the problem is our network guys are running a Nessus security scan and ServicePulse is coming up in the scan as a problem. We need to know if there is an upgrade or how we can mitigate this from showing up in the security scans.
We do not need to run ServicePulse dashboard though… Is that all this executable is for?
Looks like you’ve raised the same question on StackOverflow which I’ve answered.
I would encourage you to open a support case with to understand your scenario a little more.
The scan is complaining about file permissions that are too open. Everyone should not have write permissions in any Program Files folder.
I inspected my installation folder and have the same issue.
The fix is relatively easy:
Select the properties of folder C:\Program Files (x86)\Particular Software\ServicePulse
Select the Security tab
Select Advanced, a new dialog opens
Select Enable inheritance
Select OK and Yes on any confirmation dialog
Select Advanced again
Check Replace all child object permission entries with inheritable permissions entries from this object
Select OK and Yes on any confirmation dialog
Select Advanced again for the 3rd time
Remove the current entries where Inherited from states None, on my system those were Everyone and System, make sure that you see all other entries inherited from the parent folder and make sure you do not remove any of them.
Select OK and Yes on any confirmation dialog
It seems like hard procedure but that is because I’m being very detailed here. Some steps potentially can be combined but doing one change at a time keeps things easy to understand.
Now your file permissions are correctly set and comply to your security audit software.