Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Delivered-To: mailing list cygwin@cygwin.com X-Info: This message was accepted for relay by smtp03.mrf.mail.rcn.net as the sender used SMTP authentication X-Trace: UmFuZG9tSVaItqSXqkLCgOcMTQzOgRRLtQ3Gj3EgIllQvuQMuVVc7c1K9zEUuPLj Message-ID: <3EF0B461.8030204@cygwin.com> Date: Wed, 18 Jun 2003 14:50:09 -0400 From: Larry Hall Reply-To: cygwin@cygwin.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.4) Gecko/20030529 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Ross Presser CC: cygwin@cygwin.com Subject: Re: About the 'su' command References: <20030617232103.79106.qmail@web10102.mail.yahoo.com> <3EEFA434.90409@cygwin.com> In-Reply-To: Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Ross Presser wrote: > Larry Hall wrote in news:3EEFA434.90409@cygwin.com: > > >>>Do you know "someone" on an XP station that has more powers than the >>>Administrator or an Administrators member ? >> >> >>Certainly. SYSTEM. But I'd highly recommend using ssh instead of >>su. That way you don't have to create a user with privileges that >>opens a security hole just so you can su. Of course, you can do >>so if you prefer. > > > SYSTEM doesn't have the power to use network resources, does it? > As Corinna pointed out very well in this thread, access to network resources is controlled by Windows authentication. SYSTEM has the permissions that allow it to switch user context, and doing so may or may not include authentication. But I was answering your question about which ID has permissions (by default) to change to a new user ID. Network resource access is a different, though related, issue. -- Larry Hall http://www.rfk.com RFK Partners, Inc. (508) 893-9779 - RFK Office 838 Washington Street (508) 893-9889 - FAX Holliston, MA 01746 -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/