X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:in-reply-to:references:date:subject
	:from:to:mime-version:content-type:content-transfer-encoding; q=
	dns; s=default; b=sCR4x04UUtGjODkh4A721SteRfCxv+20byvjQgMLa1sPsk
	fHa1Kmx7o9OTKbHKpYCaiZAUUWBGKsYCBhkdMeZ/K9/rCFI2ndx0gD39pdb+f70q
	INItO6fIMJMB7S8HMj94rl9zOrqlpSfrV90GDoo3oa89NE1VRJNpQ6BFY62cc=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:in-reply-to:references:date:subject
	:from:to:mime-version:content-type:content-transfer-encoding; s=
	default; bh=re46N5IKcjIS1gvZBphF6bg1f6g=; b=fxFjbqW153aH3etyV7dx
	vmMjeqGehGHYqy1JTaPK2Dynihrw1ipU2JzqgoOjOYUJB4Ihx7qm3mZaBwy8JtOT
	gya83yrgOTv8QjaPhJYyvPU0QjYTTp9kX2qDtyETObH9ca/lrjW6QcfIbXGyy/El
	sJv7wbpxZUm26jY0gndHZtw=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=-1.1 required=5.0 tests=AWL,BAYES_00,RCVD_IN_DNSWL_NONE,RP_MATCHES_RCVD autolearn=ham version=3.3.2
X-HELO:	smtp-vbr5.xs4all.nl
Message-ID:	<a65de848a5c26a9d9fdf14a79f989849.squirrel@webmail.xs4all.nl>
In-Reply-To:	<20140512125054.GC2436@calimero.vinschen.de>
References:	<849f1f5420ebf77d7a591d6c9b6bfa4b DOT squirrel AT webmail DOT xs4all DOT nl> <536E339A DOT 6030200 AT breisch DOT org> <6f9d939cc604437def11828435a67f96 DOT squirrel AT webmail DOT xs4all DOT nl> <20140512125054 DOT GC2436 AT calimero DOT vinschen DOT de>
Date:	Mon, 12 May 2014 19:13:12 +0200
Subject:	Re: Baffled: is it Cygwin (64-bits) or Windows that causes the invocation of regedit (from bash) to fail?
From:	"Houder" <houder AT xs4all DOT nl>
To:	cygwin AT cygwin DOT com
User-Agent:	SquirrelMail/1.4.18
MIME-Version:	1.0
X-IsSubscribed:	yes

Hi Corinna,

Thank you for sharing your expert knowledge!

>> Consequently, I decided to investigate why I got the denial (64-bits Cygwin) at my end.
>>
>> First of all, some more info about my "environment":
>>
>>  - I am using Cygwin from Windows 7 ...
>>  - I am using Cygwin from an administrative account ...
>>  - furthermore, using secpol.msc, I have set the ConsentPromptBehaviorAdmin field in
>>
>>    HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System (key in registry)
>>
>>    to zero, meaning 'elevate without prompting'
>
> Doesn't matter.  The problem is that elevating is a special procedure,
> requiring a special form of ShellExecuteEx function, which doesn't
> integrate well with the requirements of POSIX fork/exec.  Therefore
> Cygwin never calls ShellExecuteEx to fork/exec an application, rather it
> calls CreateProcess/CreateProcessAsUser, both of which don't provide a
> way to elevate a process.  Therefore, to elevate a process from a Cygwin
> shell, the shell must already run elevated (e.g., right click on "Cygwin
> Terminal" -> "Run as Administrator...").
>
> What's really annoying:  RegEdit's mainfest does not request "asAdmin"
> rights.  Rather it only requests "MaximumAllowed".  One would think this
> means that a CreateProcess call would simply continue with the current
> permissions of the user.  Not so, unfortunately.

Interesting! I can assure you that I am UNfamiliar grounds here :-)

But how do you explain, that I can invoke regedit from 32-bits Cygwin, using
an UNelevated bash?
(both /drv/c/Windows/regedit and /drv/c/Windows/SysWOW64/regedit)

(Sorry, I will look into that myself :-)

Henri

-----
@ stat_uac
The values of the fields are currently:

 1. ConsentPromptBehaviorAdmin     0x0
 2. ConsentPromptBehaviorUser      0x1
 3. EnableInstallerDetection       0x1
 4. EnableLUA                      0x1
 5. EnableSecureUIAPaths           0x1
 6. EnableUIADesktopToggle         0x0
 7. EnableVirtualization           0x0
 8. PromptOnSecureDesktop          0x1
 9. ValidateAdminCodeSignatures    0x0
10. FilterAdministratorToken       0x0
@@

=====


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -