Mailing-List: contact cygwin-help AT sourceware DOT cygnus DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT sources DOT redhat DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT sources DOT redhat DOT com>
List-Help: <mailto:cygwin-help AT sources DOT redhat DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT sources DOT redhat DOT com
Delivered-To: mailing list cygwin AT sources DOT redhat DOT com
Date: Tue,  7 Aug 2001 10:18:00 +0100
Message-ID: <1589-Tue07Aug2001101801+0100-starksb@ebi.ac.uk>
X-Mailer: 21.1 (patch 12) "Channel Islands" XEmacs Lucid (via feedmail 9-beta-7 I);
	VM 6.92 under 21.1 (patch 12) "Channel Islands" XEmacs Lucid
From: David Starks-Browning <starksb AT ebi DOT ac DOT uk>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
To: wguynes AT mav DOT net
Cc: cygwin AT cygwin DOT com
Subject: Re: Possible to login as different user?
In-Reply-To: <dshumt8j7rbuegt3tlej0242ki86j5bule@smtp.prodigy.net>
References: <vr9rmt8gjqgv1888hsvbda0l1i0qbgo1rh AT smtp DOT prodigy DOT net>
	<8839-Mon06Aug2001094104+0100-starksb AT ebi DOT ac DOT uk>
	<dshumt8j7rbuegt3tlej0242ki86j5bule AT smtp DOT prodigy DOT net>

On Monday 6 Aug 01, William Guynes writes:
> On Mon,  6 Aug 2001 09:41:04 +0100, David Starks-Browning
> <starksb AT ebi DOT ac DOT uk> wrote:
> >I don't use su or login, so I need help with this FAQ entry.
> 
> The only things I can think of would be some form of explanation of
> why "su" was removed and, possibly, some instructions of how to get
> "login" working.  

You mean, beyond what's in /usr/doc/Cygwin/login.README?  If that file
is incomplete or inadequate, we should work on that, rather than add
to the FAQ.

> Any security risks in doing so could be detailed.
> 
> Potential Risk:  Don't let a default installation give a user a
> backdoor to possibly bypass NT user security. (?)

Sorry, what do you mean?  If you can explain this to me I would
consider putting something in the FAQ.  Though if it's login+Cygwin
related, I might argue that it goes in /usr/doc/Cygwin/login.README.

(I don't rely on Cygwin for any security, except to let ssh encrypt my
remote logins.  So I don't pay attention to these issues, so I can't
write about them in the FAQ.)

Hope this helps.

Regards,
David
(Cygwin FAQ maintainer)


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/