Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
To:	cygwin AT cygwin DOT com
From:	Thorsten Kampe <thorsten AT thorstenkampe DOT de>
Subject:	Re: AllVersions: Running Cygwin X w/ Registy Entries
Date:	Wed, 26 Oct 2005 20:14:34 +0100
Lines:	17
Message-ID:	<1e9ifv5iyvszt$.1mvv72nqwf2cg$.dlg@40tude.net>
References:	<b4pbgnamlpal DOT 1c8pbv7kbbf9j DOT dlg AT 40tude DOT net> <SERRANOzxTs53iVdGJ500000268 AT SERRANO DOT CAM DOT ARTIMI DOT COM>
Mime-Version:	1.0
User-Agent:	40tude_Dialog/2.0.15.1
X-IsSubscribed:	yes

* Dave Korn (2005-10-26 19:45 +0100)
> Thorsten Kampe wrote:
>> * Chris Taylor (2005-10-26 17:38 +0100)
>>> Problem with that is that if the sysadmin knows what he's doing, it only
>>> takes about 4 seconds to block off almost all possible ways of actually
>>> editing the registry...
>> 
>> Definitely not. 
> 
>   Oh yes it does.  Start->Run->regedit.  Right-click the user's tree under
> HKEY_USERS, choose Permissions, remove their write access leaving them a
> read-only per-user registry tree.  Easily done in 4 seconds by an experienced
> BOFH, and can't be reversed without admin rights!

Yea, sure. And how many programms will you be able to run in that
configuration? Will you even be able to logon? Anyway: mount won't
work in that scenario either (because it modifies the registry).


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

- Raw text -