Mailing-List: contact cygwin-help AT sourceware DOT cygnus DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT sources DOT redhat DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT sources DOT redhat DOT com>
List-Help: <mailto:cygwin-help AT sources DOT redhat DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT sources DOT redhat DOT com
Delivered-To: mailing list cygwin AT sources DOT redhat DOT com
From: Corinna Vinschen <cygwin AT cygwin DOT com>
Date: Sun, 17 Dec 2000 12:46:14 +0100
X-Mailer: KMail [version 1.1.99]
Content-Type: text/plain;
  charset="us-ascii"
To: cygwin <cygwin AT cygwin DOT com>
References: <OF4452111B DOT B0F21FC3-ON862569B2 DOT 00610F4F AT mmm DOT com> <3A3C668F DOT E6885AC8 AT ece DOT gatech DOT edu> <3A3C7677 DOT 29906E35 AT ece DOT gatech DOT edu>
In-Reply-To: <3A3C7677.29906E35@ece.gatech.edu>
Subject: Re: CVS permissions problem with network drive
MIME-Version: 1.0
Message-Id: <0012171246140L.00473@cygbert>
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by delorie.com id GAA16724

On Sunday 17 December 2000 09:16, Charles S. Wilson wrote:
> "Charles S. Wilson" wrote:
> > The necessary right appears to be "Restore Files and Directories"
> > (SeRestorePrivilege).  At least the following did not work:
> >
> > host user cwilson: member of 'Power Users', no additional rights
> >   but this DID work:
> > host user cwilson: membero of 'Power Users' + SeRestorePrivilege.
> >
> > (It's possible the necessary rights are SeRestorePrivilege + the
> > rights granted by Power User status, as opposed to normal User).
>
> Dadgummit.  Looks like I spoke too soon.  It is true that the
> preceeding combination of rights will allow 'touch foo' to create a
> file with the desired permissions (umask = 002 ---> -rw-rw-r-- foo)
> but I'm still prevented from THEN doing a 'chmod 777 foo'.
>
> > So: In order to access a CVS repository on an SMB share exported by
> > an NT host, the user's account on the host must have the
> > SeRestorePrivilege right.  However, this is dangerous:
>
> This is bull.  Ignore.

No, this isn't bull! You are right. You only did it the half way.

If _both_ accounts (your local account and the remote account used
for the SMB connection) have the SeRestorePrivilge user right everything
works as expected.

Thanks for the hint, Chuck.

However, giving this permission remains dangerous for the reasons you
explained in your previous mail. So the correct way in terms of NT
security is still using domains and domain accounts.

Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Developer                                mailto:cygwin AT cygwin DOT com
Red Hat, Inc.

--
Want to unsubscribe from this list?
Send a message to cygwin-unsubscribe AT sourceware DOT cygnus DOT com