X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:reply-to:subject:to:references:from:message-id
	:date:mime-version:in-reply-to:content-type
	:content-transfer-encoding; q=dns; s=default; b=aFLHKnvOKtGPkdKM
	XGaxX7YZNmK6u9OIfz3T1p3k2mWA4705S3UJQK+6hj1mHp+2GN64tvPlgxnEAMxv
	lS0ieixU//1mif6jL3kOrsvl7XSkiHU5PluJVi1oQaWQq+IC5W8sgz/g49tVIzQx
	C0MkJ+GVeG/gAw/UdlKLYubWaek=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:reply-to:subject:to:references:from:message-id
	:date:mime-version:in-reply-to:content-type
	:content-transfer-encoding; s=default; bh=bEl57k0CX4Dy9Mql1YdQTe
	PBG5o=; b=NQD5RDAXdDIroYtljAw947x/LLE0Sj/o8UYmtIJp+nr7HzNgMKaBdh
	FH7oohf6b1iSTWPo6qb8NM6Dvvjou+lVkrOCRPySbJDpoqBGkkbiWOg/j780jVUL
	xPYsTarI2h2InahC4pM66qjK7CO15AfFDGOgkpAxkDVjSv+EHBzi4=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=-1.4 required=5.0 tests=AWL,BAYES_00,KAM_LAZY_DOMAIN_SECURITY,RCVD_IN_DNSWL_LOW autolearn=no version=3.3.2 spammy=Hx-spam-relays-external:64.59.134.13, H*RU:64.59.134.13
X-HELO:	smtp-out-no.shaw.ca
X-Authority-Analysis:	v=2.2 cv=a+JAzQaF c=1 sm=1 tr=0 a=WqCeCkldcEjBO3QZneQsCg==:117 a=WqCeCkldcEjBO3QZneQsCg==:17 a=IkcTkHD0fZMA:10 a=P2XcGv4-MMhM2aWkUtQA:9 a=QEXdDO2ut3YA:10
Reply-To:	Brian DOT Inglis AT SystematicSw DOT ab DOT ca
Subject:	Re: Problems with ssh-host-config and /var/run directory
To:	cygwin AT cygwin DOT com
References:	<59272F87 DOT 9050300 AT faroul DOT de> <63db7c1b-bb96-c809-4a47-e727089d0c8a AT SystematicSw DOT ab DOT ca>
From:	Brian Inglis <Brian DOT Inglis AT SystematicSw DOT ab DOT ca>
Message-ID:	<b7bc90d4-0cec-44f7-e6fa-199540e819ca@SystematicSw.ab.ca>
Date:	Fri, 26 May 2017 01:39:51 -0600
User-Agent:	Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.1.1
MIME-Version:	1.0
In-Reply-To:	<63db7c1b-bb96-c809-4a47-e727089d0c8a@SystematicSw.ab.ca>
X-CMAE-Envelope:	MS4wfIk1af99paMf6oxd/fbTgKB5FXfKKbpX1z2L+CCXsbuClB1R0FArdPVPBFYPXKuzPhhIYaGlSwbA6cHlSuilpp0N0DzuIi3Ujy365G8N0/cRxc5B/6TQ xto0nZX5bhIG4z0R+u0P7GoZk86YEoIv4NXmW6YShJSs3I+En9OCDuTBOmThwI2eXn/uQnMCJV0qgA==
X-IsSubscribed:	yes

On 2017-05-25 15:36, Brian Inglis wrote:
> On 2017-05-25 13:24, Henning Peters wrote:
>> I switched from 32bit to 64bit a week ago, moved "cygwin" to 
>> "cygwin32" and reinstalled from scratch into a new "cygwin"
>> directory.
>> when trying to setup sshd using ssh-host-config, I get this message
>> when using StrictModes (which I want to and did before on cygwin32
>> on this system):
>> *** Warning: The owner and the Administrators need
>> *** Warning: to have .w. permission to /var/run.
>> *** Warning: Here are the current permissions and ACLS:
>> *** Warning:     drwxrwxrwt+ 1 faroul root 0 May 19 20:56 /var/run
>> *** Warning:     # file: /var/run
>> *** Warning:     # owner: faroul
>> *** Warning:     # group: root
>> *** Warning:     # flags: --t
>> *** Warning:     user::rwx
>> *** Warning:     group::rwx
>> *** Warning:     group:root:rwx
>> *** Warning:     group:SYSTEM:rwx
>> *** Warning:     mask:rwx
>> *** Warning:     other:rwx
>> *** Warning:     default:user::rwx
>> *** Warning:     default:group::rwx
>> *** Warning:     default:other:r-x
>> *** Warning:
>> *** Warning: Please change the user and/or group ownership,
>> *** Warning: permissions, or ACLs of /var/run.
>> *** ERROR: Problem with /var/run directory. Exiting.
>> I tried a lot, but cannot find any solution.
>> Any hints?
> 
> It's telling you that the Administrators group is missing write
> access.
> 
> Do you have a root id on your system or are you using passwd and
> group files?
> 
> You could either change group ownership from root to Administrators:
> 	$ chgrp -cR Administrators /var/run
> 
> and if your admin id is not faroul:
> 	$ chown -cR <adminid> /var/run
> 
> or, to add explicit Administrators group access, and default access 
> to files created, explicit admin id ACL and DACL, and others read
> and search:
> 	$ setfacl -m g:Administrators:rwx,d:g:Administrators:rwx,\
> u:<adminid>:rwx,d:g:<adminid>:rwx,o::r-x /var/run

Typos:
	$ setfacl -m g:Administrators:rwx,d:g:Administrators:rwx,\
u:<adminid>:rwx,d:u:<adminid>:rwx,o::r-x /var/run

> add Administrators and admin id to existing files:
> 	$ setfacl -m g:Administrators:rwx,u:<adminid>:rwx,\
> o::r-x /var/run/*

	$ setfacl -m g:Administrators:rw-,u:<adminid>:rw-,\
o::r-- /var/run/*

-- 
Take care. Thanks, Brian Inglis, Calgary, Alberta, Canada

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -