X-Recipient: archive-cygwin@delorie.com X-SWARE-Spam-Status: No, hits=-1.8 required=5.0 tests=AWL,BAYES_00,RP_MATCHES_RCVD X-Spam-Check-By: sourceware.org To: cygwin@cygwin.com Subject: Re: admin privileges when logging in by ssh? References: <20111004094440.GB14728@calimero.vinschen.de> <0s9m87drlejguq5s9u6njre69spr5sd8o6@4ax.com> <20111004175341.GA14345@calimero.vinschen.de> <20111014182330.GC22040@calimero.vinschen.de> <20111014191451.GD22040@calimero.vinschen.de> <20111015171128.GD6680@calimero.vinschen.de> <20111015184034.GE6680@calimero.vinschen.de> From: ht@inf.ed.ac.uk (Henry S. Thompson) Date: Sun, 16 Oct 2011 17:25:14 +0100 In-Reply-To: <20111015184034.GE6680@calimero.vinschen.de> (Corinna Vinschen's message of "Sat, 15 Oct 2011 20:40:34 +0200") Message-ID: User-Agent: Gnus/5.1008 (Gnus v5.10.8) XEmacs/21.4.21 (linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Edinburgh-Scanned: at treacle.ucs.ed.ac.uk with MIMEDefang 2.60, Sophie, Sophos Anti-Virus, Clam AntiVirus X-IsSubscribed: yes Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Unsubscribe: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Delivered-To: mailing list cygwin@cygwin.com Corinna Vinschen writes: > . . . > By simply trying them out, I created a list of the privileges which > trigger the high integrity level requirement. See, for instance, > http://sourceware.org/cgi-bin/cvsweb.cgi/src/winsup/cygwin/sec_helper.cc.diff?r1=1.93&r2=1.94&cvsroot=src&f=h > For the security related change, see the second patch snippet in > http://sourceware.org/cgi-bin/cvsweb.cgi/src/winsup/cygwin/sec_auth.cc.diff?r1=1.41&r2=1.42&cvsroot=src&f=h Dare I suggest (yet another) gold star for Corinna? Who else would dive right in to the relevant obscure part of Windows, figure out how to reverse engineer the relevant bits, and produce a snapshot, on the basis on one user request. Hear hear! ht -- Henry S. Thompson, School of Informatics, University of Edinburgh 10 Crichton Street, Edinburgh EH8 9AB, SCOTLAND -- (44) 131 650-4440 Fax: (44) 131 651-1426, e-mail: ht@inf.ed.ac.uk URL: http://www.ltg.ed.ac.uk/~ht/ [mail from me _always_ has a .sig like this -- mail without it is forged spam] -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple