Mailing-List: contact cygwin-help AT sourceware DOT cygnus DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT sources DOT redhat DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT sources DOT redhat DOT com>
List-Help: <mailto:cygwin-help AT sources DOT redhat DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT sources DOT redhat DOT com
Delivered-To: mailing list cygwin AT sources DOT redhat DOT com
Message-ID: <00c401bff7cb$93c116b0$f7c723cb@lifelesswks>
From: "Robert Collins" <robert DOT collins AT itdomain DOT com DOT au>
To: "Andrej Borsenkow" <Andrej DOT Borsenkow AT mow DOT siemens DOT ru>,
        <Cygwin AT Sourceware DOT Cygnus DOT Com>
References: <000301bff7c9$9405abb0$21c9ca95 AT mow DOT siemens DOT ru>
Subject: Re: Something weird with security context on Win2k
Date: Thu, 27 Jul 2000 23:07:03 +1000
MIME-Version: 1.0
Content-Type: text/plain;
	charset="koi8-r"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.00.2919.6700
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.6700

runas does some 'funny' stuff.

if you use /profile you will find the administrator registry hive gets
loaded, other wise cygwin.bat will run in _your_ context with
_administrator's_ SID!

Rob

----- Original Message -----
From: "Andrej Borsenkow" <Andrej DOT Borsenkow AT mow DOT siemens DOT ru>
To: <Cygwin AT Sourceware DOT Cygnus DOT Com>
Sent: Thursday, July 27, 2000 10:52 PM
Subject: Something weird with security context on Win2k


> I'm running Win2k Professional with 128bit and IE5.01SP1. It is part of
NT4
> domain with DC being NT4SP6a. Cygwin was downloaded two days ago. Most of
the
> time I am logged in as domain user.
>
> I have local user with the same name as domain user. Because of known
problems
> with gdb in this case, I tried to use runas.exe to start a program under
this
> user account (runas is much like sudo on Unix):
>
> runas /user:localuser c:\cygwin\cygwin.bat
>
> For whatever reson bash is almost always started in security context of
DOMAIN
> user with this name and not LOCAL user. This happens after lomg delay. It
is
> easily seen - all my mounts (local to my domain account) are there, and id
> reports domain user. Just once it was correctly started under local user -
> that was why I noted it at all.
>
> I add, that I have admin privileges - so, if Cygwin incorrectly determines
> personality, it probably can assume any user's identity (I am not so deep
in
> Win32 to express it in correct terms).
>
> Anybody has seen it?
>
> -andrej
>
> Have a nice DOS!
> B >>
>
>
> --
> Want to unsubscribe from this list?
> Send a message to cygwin-unsubscribe AT sourceware DOT cygnus DOT com
>
>


--
Want to unsubscribe from this list?
Send a message to cygwin-unsubscribe AT sourceware DOT cygnus DOT com