delorie.com/archives/browse.cgi   search  
Mail Archives: cygwin/2000/11/10/16:58:47

Mailing-List: contact cygwin-help AT sourceware DOT cygnus DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT sources DOT redhat DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT sources DOT redhat DOT com>
List-Help: <mailto:cygwin-help AT sources DOT redhat DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT sources DOT redhat DOT com
Delivered-To: mailing list cygwin AT sources DOT redhat DOT com
Message-ID: <C322F78942E6D311AF8800D0B73C4FD8830DCB@CUPEX3.rational.com>
From: "Masterson, Dave" <dmasters AT rational DOT com>
To: "'cygwin'" <cygwin AT sources DOT redhat DOT com>
Subject: RE: NTSEC, passwd/group, and "544"
Date: Fri, 10 Nov 2000 13:55:23 -0800
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2650.21)

Corinna Vinschen wrote:
> "Masterson, Dave" wrote:
> > > 544 is the admins group.
> > 
> > Ok, I see that now from the documentation.  However, what 
> > governs the permissions on the file?
> 
> Under NT? The permissions set on the parent directory. But this
> is really MS documentation.

No, I meant under CYGWIN -- why might the file permissions be displayed
differently by "ls -l" depending on whether ntsec is turned on or not?

> > > If ntsec is off, the ownership might be faked dependent of the
> > > contents of /etc/passwd.
> > 
> > How?  Does it simply assume that all files are owned by the 
> > current user (ie. leave it to Windows to arbitrate access to 
> > the file)?
> 
> Sorry, wrong description. On NTFS it always uses the RID then which
> is substituted by a name in `ls -l' output iff /etc/passwd has a
> corresponding user entry.

Okay, I'm on NTFS.  How does NTSEC play into this?  In my case, with NTSEC,
the file ownership is "544" while, without NTSEC, the file ownership is
"1897" ("ls -ln" output).
 
> > > myadmingrp::544:513:,S-1-5-32-544::/bin/false
> > 
> > I thought mkpasswd (without "-s") would do this by default 
> > (but "root" instead of "myadmingrp").
> > [...]
> > > > BTW, mkpasswd and mkgroup did not make the "root" account/group
> > 
> > > Sure. They are not intended to do it by themselves. It's _your_
> > > choice.
> > 
> > By my choice, do you mean my choice for adding "-s" to the 
> > command line?  Or do you mean that mkpasswd doesn't add these accounts 
> > at all and its my choice to add them by hand?
> 
> mkpasswd didn't that up to Cygwin-1.1.5-4, it does from 1.1.5-6 on.
> But it _never_ uses another login name than the one which is given
> by the NT system (locale dependent). If you want that Cygwin sees
> admins as root, _you_ have to change the name like the aforementioned
> `myadmingrp' example.

Okay, I'll go along with that.  I believe the docs, though, imply that this
happens from 1.1 on.  See
http://sources.redhat.com/cygwin/cygwin-ug-net/ntsec.html#NTSEC-RELEASE1.1.

--
David Masterson
*	dmasters AT rational DOT com

--
Want to unsubscribe from this list?
Send a message to cygwin-unsubscribe AT sourceware DOT cygnus DOT com

- Raw text -


  webmaster     delorie software   privacy  
  Copyright © 2019   by DJ Delorie     Updated Jul 2019