fix: add permissions to IIS

Signed-off-by: Felipe Zipitria <felipe.zipitria@owasp.org>

Author: fzipi

iis/installer.wxs

@@ -411,8 +411,8 @@
         <CustomAction Id="Cleanup4" Execute="deferred" Impersonate="no" Return="ignore" Directory="INSTALLFOLDER" ExeCommand="&quot;[SystemFolder]inetsrv\appcmd.exe&quot; uninstall module /module.name:&quot;ModSecurity IIS&quot;" />
         <CustomAction Id="Cleanup5" Execute="deferred" Impersonate="no" Return="ignore" Directory="INSTALLFOLDER" ExeCommand="&quot;[SystemFolder]inetsrv\appcmd.exe&quot; uninstall module /module.name:&quot;ModSecurityIIS&quot;" />
         <?endif?>
-        <!-- Create required directories for ModSecurity -->
-        <CustomAction Id="CreateModSecurityDirs" Execute="deferred" Impersonate="no" Return="ignore" Directory="INSTALLFOLDER" ExeCommand="cmd.exe /c &quot;if not exist c:\inetpub\temp mkdir c:\inetpub\temp &amp; if not exist c:\inetpub\logs mkdir c:\inetpub\logs&quot;" />
+        <!-- Create required directories for ModSecurity with proper permissions for IIS -->
+        <CustomAction Id="CreateModSecurityDirs" Execute="deferred" Impersonate="no" Return="ignore" Directory="INSTALLFOLDER" ExeCommand="cmd.exe /c &quot;if not exist c:\inetpub\temp mkdir c:\inetpub\temp &amp; if not exist c:\inetpub\logs mkdir c:\inetpub\logs &amp; icacls c:\inetpub\temp /grant IIS_IUSRS:(OI)(CI)M /T &amp; icacls c:\inetpub\logs /grant IIS_IUSRS:(OI)(CI)M /T&quot;" />
         <?if $(var.Win64) = "yes" ?>
         <CustomAction Id="InstallModule32" Execute="deferred" Impersonate="no" Return="check" Directory="INSTALLFOLDER" ExeCommand="&quot;[System64Folder]inetsrv\appcmd.exe&quot; install module /name:&quot;ModSecurity IIS (64bits)&quot; /image:&quot;%SystemRoot%\System32\inetsrv\ModSecurityIIS.dll&quot; /preCondition:&quot;bitness64&quot;" />
         <CustomAction Id="InstallModule64" Execute="deferred" Impersonate="no" Return="check" Directory="INSTALLFOLDER" ExeCommand="&quot;[System64Folder]inetsrv\appcmd.exe&quot; install module /name:&quot;ModSecurity IIS (32bits)&quot; /image:&quot;%SystemRoot%\SysWOW64\inetsrv\ModSecurityIIS.dll&quot; /preCondition:&quot;bitness32&quot;" />