X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:reply-to:message-id:to:subject
	:in-reply-to:references:mime-version:content-type
	:content-transfer-encoding; q=dns; s=default; b=MPM1AooL9z3dYEqw
	zqhBjaVIphtGv0ROBHqc+UDCXSMjm8waD78bG90RAByaUVhdcXgQgl9TQuFTIWmZ
	j6KTD6Y6p2Gy7gZ42lIhP7h6d1JrHd041cqW4jxhwUMKU8ie3tl18SXAr4RcMk4m
	AG0/RWrIsREVL3e7ysVOd1noHOM=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:reply-to:message-id:to:subject
	:in-reply-to:references:mime-version:content-type
	:content-transfer-encoding; s=default; bh=p5vtoGmttr5jDGYMyssMs/
	jMMhk=; b=nVFO5nf/D0ppC5M9/vyg6L3u0GjUQrxN2RtkA9nP3bX09RraSkNR67
	hMwj2t5W5GLO+9x0VHLTpbLxhEp91GNBhIO9OIkQyT17jQIPEkZyI+XnbXTZdMf5
	oJ1UOjAanxOkPd5fCuXnIzsRsPQovPVYd/zZbWYgVgR5FBaD581hE=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
X-Spam-SWARE-Status:	No, score=0.1 required=5.0 tests=AWL,BAYES_05,FREEMAIL_FROM,KAM_THEBAT,KHOP_THREADED,SPF_SOFTFAIL,TW_NL autolearn=no version=3.3.1
Date:	Fri, 5 Apr 2013 01:45:25 +0400
From:	Andrey Repin <anrdaemon AT freemail DOT ru>
Reply-To:	Andrey Repin <cygwin AT cygwin DOT com>
Message-ID:	<906622287.20130405014525@mtu-net.ru>
To:	Corinna Vinschen <cygwin AT cygwin DOT com>
Subject:	Re: winln for native symlinks
In-Reply-To:	<20130404172412.GA21356@calimero.vinschen.de>
References:	<515BD718 DOT 8080605 AT dancol DOT org> <515BE1BF DOT 5010803 AT towo DOT net> <515BE36F DOT 6030701 AT dancol DOT org> <515DA0D9 DOT 7050209 AT towo DOT net> <515DA8F9 DOT 9000208 AT openafs DOT org> <20130404172412 DOT GA21356 AT calimero DOT vinschen DOT de>
MIME-Version:	1.0
X-IsSubscribed:	yes

Greetings, Corinna Vinschen!

>> > It shows this error message:
>> > winln: you don't permission to create symbolic links. Run, as
>> > administrator,
>> > winln:   editrights -a SeCreateSymbolicLinkPrivilege -a $YOUR_USER
>> > which should be fixed somehow like this:
>> > You don't have permission to create symbolic links. Run, as administrator,
>> >         editrights -a SeCreateSymbolicLinkPrivilege -u $USER
>> > Moreover, this advice does not help. Even after having issued this
>> > command as administrator, winln -s still works as administrator only.
>> 
>> The SeCreateSymbolicLinkPrivilege privilege is filtered by User Account
>> Control (UAC).  If your account is a member of the "Administrators"
>> group, then the process needs to be run with your elevated credentials
>> in order to make use of the SeCreateSymbolicLinkPrivilege privilege.
>> 
>> The "Administrator" account always runs in an elevated state and
>> accounts that are not members of the "Administrators" group do not have
>> their security tokens filtered by UAC.
>> 
>> Does Cygwin permit binaries to be built with manifests?  If so,
>> winln.exe could include an embedded manifest that indicates that
>> elevated status is required.  The user would then be prompted by UAC
>> whenever the command is used.

> That doesn't work.  You have to run in an elevated console or an
> elevated mintty.  Cygwin uses CreateProcess to start child processes and
> there's no way to make CreateProcess start the UAC confirmation process.
> Only ShellExecute{Ex} can do that.

However, this could be worked around through a recursive call to the program
with the same parameters it was invoked in case of errors, that may have been
caused by UAC. Not the best solution, however, and not always appropriate, I
admit (i.e. invoking UAC prompt in remote terminal session would be a bad idea).
Though... on the other hand, guys from Far group managed to wrap UAC prompt in
the Far manager, if I understand it right. (I don't have Vista/Win7 to fully
test the mechanics, unfortunately.)


--
WBR,
Andrey Repin (anrdaemon AT freemail DOT ru) 05.04.2013, <01:32>

Sorry for my terrible english...


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -