X-Recipient: archive-cygwin@delorie.com X-Spam-Check-By: sourceware.org Message-ID: <480C59CA.FA9F3864@dessent.net> Date: Mon, 21 Apr 2008 02:09:30 -0700 From: Brian Dessent X-Mailer: Mozilla 4.79 [en] (Windows NT 5.0; U) MIME-Version: 1.0 To: cygwin@cygwin.com Subject: Re: Vista + cygwin basics References: <4802CD4D.2030805@cwilson.fastmail.fm> <480A3B4C.2040205@cwilson.fastmail.fm> <480A4B67.7911174B@dessent.net> <480BA842.6010609@cwilson.fastmail.fm> <480C43FC.2FAA58C3@dessent.net> <20080421085001.GR23852@calimero.vinschen.de> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-IsSubscribed: yes Reply-To: cygwin@cygwin.com Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Delivered-To: mailing list cygwin@cygwin.com Corinna Vinschen wrote: > Sorry Brian, but this has only marginally to do with integrity levels. > The real reason for this is the SeCreateGlobalPrivilege introduced with > Windows 2003. Only administrative users hold this privilege by default, Right, I wasn't trying to imply that the location of the shared section had anything to do with IL, just explaining why his elevated shell in session 1 could see the processes of services in session 0 (i.e. because the elevated session 1 could create the shared section in the global namespace and read the cygwin process table.) Brian -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/