Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Delivered-To: mailing list cygwin@cygwin.com Date: Thu, 16 Oct 2003 17:23:39 +0300 From: Baurjan Ismagulov To: cygwin@sources.redhat.com Subject: Re: setreuid Message-ID: <20031016142337.GC5542@ata.cs.hacettepe.edu.tr> Mail-Followup-To: cygwin@sources.redhat.com References: <20031015105210.GF18774@ata.cs.hacettepe.edu.tr> <20031016103723.GA5542@ata.cs.hacettepe.edu.tr> <20031016125317.GB5542@ata.cs.hacettepe.edu.tr> Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <20031016125317.GB5542@ata.cs.hacettepe.edu.tr> User-Agent: Mutt/1.5.4i On Thu, Oct 16, 2003 at 13:19:29, Corinna Vinschen wrote: > No, that's not right. The German term for "increase quotas" is > "Anpassen von Speicherkontingenten fuer einen Prozess" (at least on > 2003 Server). "Erstellen eines Tokenobjekts" is German for "Create > a token object". Hmmm, the document you pointed to mentions "act as part of the operating system", "replace process level token" and "increase quotas". Now I have the following privileges granted: Einsetzen als Teil des Betriebssystems ZAISAN\ibr Ersetzen eines Tokens auf Prozessebene ZAISAN\ibr Anpassen von Speicherkontingenten für einen Prozess Administratoren Erstellen eines Tokenobjekts - ibr is a member of Administratoren. Logout, login, tftpd. The result is: setreuid(1012, 1012) = -1 EPERM. This works if I grant "Erstellen eines Tokenobjekts" to ZAISAN\ibr. What is going on? With kind regards, Baurjan. -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/