Subject: Re: Security Issue with Cygwin
From: "Max Bowsher" <[email-masked]>
To: "Lambeth Darwin" <[email-masked]>, <[email-masked]>
Cc: <[email-masked]>
Date: Thu, 23 Jan 2003 00:59:54 -0000

Lambeth Darwin wrote:
> To whom it may concern;
>
> Not sure if you know this or not, but the default configuration with
> Cygwin allows any user to change to any directory on a W2K box and
> delete whatever files they want. I have installed it with the current
> default instructions and was able to logon as a regular domain user
> and cd to c: and delete or add files. That is a major issue. Let me
> know if there is something I missed.

Sounds like C: has excessively relaxed permissions, and you coincidentally
noticed after you had installed Cygwin.

You should be able to exactly the same from a cmd.exe shell.

Max.

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/