delorie.com/archives/browse.cgi   search  
Mail Archives: cygwin-developers/1999/06/09/05:50:00

Mailing-List: contact cygwin-developers-help AT sourceware DOT cygnus DOT com; run by ezmlm
Sender: cygwin-developers-owner AT sourceware DOT cygnus DOT com
Delivered-To: mailing list cygwin-developers AT sourceware DOT cygnus DOT com
Date: Wed, 9 Jun 1999 13:35:41 +0400
From: Egor Duda <deo AT logos-m DOT ru>
X-Mailer: The Bat! (v1.029) S/N A0F2A05A
Reply-To: Egor Duda <deo AT logos-m DOT ru>
Organization: DEO
Message-ID: <14566.990609@logos-m.ru>
To: Corinna Vinschen <corinna AT vinschen DOT de>
CC: cygwin-developers <cygwin-developers AT sourceware DOT cygnus DOT com>
Subject: Re[2]: default /etc/passwd contents
References: <375D805A DOT 90C9D21B AT vinschen DOT de>
Mime-Version: 1.0

Hi!

9 Θώνό 1999 Corinna Vinschen corinna AT vinschen DOT de wrote:

>> You can't get gid, because gid is only meaningful, if it's read from
>> /etc/passwd. Remember: Outside of domains, no primary group exists.
>> You only get name and uid but it should be possible, to use the
>> administrators group (gid 544) as primary group in any case.

Won't it give too much rights to this default user?

CV> Umm, I thought about it once more. This may also work with ntsec.
CV> Would you please try it, Egor?

CV> It then would be better, to insert /bin/sh as shell again in this entry,
CV> because this would be compatible to the standard behaviour.

AFAIK, far more common practice is to assign /bin/nonexistent as a
shell for most users, at least 80% of users on our unix hosts don't
have a shell. or perhaps it should be controlled via environment
variable CYGWIN_SHELL?

CV> This also would be a good choice for the default /etc/group entry.
CV> Instead of using the dummy group `Everyone' which doesn't refer
CV> to any meaningful group, I suggest using the `Administrators'
CV> group (gid 544). We would get the groups native name with the call
CV> `LookupAccountSid (NULL, get_admin_sid (), ...)'!

hmm. i think it will work under NT, however i think that we should give
minimal rights to "dummy" user. Will it be so, if he will belong to
"Administrators" group?

Either way, under win95 there should be some default uid and gid.

Egor.            mailto:deo AT logos-m DOT ru ICQ 5165414 FidoNet 2:5020/496.19


- Raw text -


  webmaster     delorie software   privacy  
  Copyright © 2019   by DJ Delorie     Updated Jul 2019