Mailing-List: contact cygwin-help AT sourceware DOT cygnus DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT sources DOT redhat DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT sources DOT redhat DOT com>
List-Help: <mailto:cygwin-help AT sources DOT redhat DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT sources DOT redhat DOT com
Delivered-To: mailing list cygwin AT sources DOT redhat DOT com
Date: Wed, 23 May 2001 10:42:08 +0200
From: Corinna Vinschen <cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: [ANNOUNCEMENT] Updated: inetutils-1.3.2-13
Message-ID: <20010523104208.O10118@cygbert.vinschen.de>
Mail-Followup-To: cygwin AT cygwin DOT com
References: <200105221447 DOT f4MEleh18049 AT rtl DOT cygnus DOT com> <3B0AF4D4 DOT 8719 DOT 2475C4F1 AT localhost>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <3B0AF4D4.8719.2475C4F1@localhost>; from gerrit.haase@t-online.de on Tue, May 22, 2001 at 11:23:00PM +0200

On Tue, May 22, 2001 at 11:23:00PM +0200, Gerrit P. Haase wrote:
> Corinna Vinschen schrieb am 2001-05-22, 10:47:
> 
> > I've updated the version of inetutils in cygwin/latest to 1.3.2-13.
> 
> I will never understand all this...

I think, I do. It's probably my fault.

> And why am I SYSTEM now?

Are you using ntsec? If not, could you set CYGWIN to contain ntsec
for inetd and look if that changes things for you?

Sigh, I fear I have to change this and that in the authentication
code in Cygwin...

The problem is that I added code to Cygwin which I didn't want
to announce too early:

If you're running under SYSTEM account (like inetd) the new seteuid
code tries to change the user context without a password by creating
a user token directly (actually that isn't restricted to SYSTEM but to
any account which has a specific user privilege).

Unfortunately, this code is executed even if ntsec is off while another
piece of code which tries to evaluate the current user is partly not
executed when ntsec is off. AFAICS, this results in a misinterpretation
of the user information.

Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Developer                                mailto:cygwin AT cygwin DOT com
Red Hat, Inc.

--
Want to unsubscribe from this list?
Check out: http://cygwin.com/ml/#unsubscribe-simple