Mailing-List:	contact cygwin-help AT sourceware DOT cygnus DOT com; run by ezmlm
List-Subscribe:	<mailto:cygwin-subscribe AT sources DOT redhat DOT com>
List-Archive:	<http://sources.redhat.com/ml/cygwin/>
List-Post:	<mailto:cygwin AT sources DOT redhat DOT com>
List-Help:	<mailto:cygwin-help AT sources DOT redhat DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender:	cygwin-owner AT sources DOT redhat DOT com
Delivered-To:	mailing list cygwin AT sources DOT redhat DOT com
Date:	Fri, 4 May 2001 21:02:04 +0200
From:	Corinna Vinschen <cygwin AT cygwin DOT com>
To:	cygwin AT cygwin DOT com
Subject:	Re: (Fwd) CYGWIN=nontsec nontea ???
Message-ID:	<20010504210204.I24200@cygbert.vinschen.de>
Mail-Followup-To:	cygwin AT cygwin DOT com
References:	<3AF3048F DOT 13957 DOT 1EEBA8D AT localhost>
Mime-Version:	1.0
User-Agent:	Mutt/1.2.5i
In-Reply-To:	<3AF3048F.13957.1EEBA8D@localhost>; from gerrit.haase@t-online.de on Fri, May 04, 2001 at 07:35:43PM +0200

On Fri, May 04, 2001 at 07:35:43PM +0200, Gerrit P. Haase wrote:
> 
> That is dubios...
> will it work if i set ntsec and ntea?
> 
> root AT ISMENE ~
> $ id
> uid=500(root) gid=544(root) groups=544(root)
> 
> root AT ISMENE ~
> $ /usr/sbin/fetchnews -vvv
> /usr/sbin/fetchnews: must be run as news or root
> 
> 
> >From the source:
> 
>     setgid( pw->pw_gid );
>     setuid( pw->pw_uid );
>     if ( getuid() = pw->pw_uid || getgid() = pw->pw_gid ) {
                   ^^^                      ^^^
		   These both shouldn't work here.

>         fprintf( stderr, "%s: must be run as news or root\n", progname );
>         return FALSE;
>     }
> 
> Is getuid or getgid not working on cygwin?

Nope, it's setuid which can't change the user context without
a password. Result: The uid isn't changed...

Did you read the ntsec chapter in the users guide?

Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Developer                                mailto:cygwin AT cygwin DOT com
Red Hat, Inc.

--
Want to unsubscribe from this list?
Check out: http://cygwin.com/ml/#unsubscribe-simple

- Raw text -