Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Date: Wed, 6 Mar 2002 21:32:02 +0100
From: Corinna Vinschen <cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: login: no shell: /bin/bash: Permission denied
Message-ID: <20020306213202.C13590@cygbert.vinschen.de>
Mail-Followup-To: cygwin AT cygwin DOT com
References: <m3eliylhc2 DOT fsf AT appel DOT lilypond DOT org> <20020306101433 DOT P13590 AT cygbert DOT vinschen DOT de> <3C866A0B DOT 6040500 AT DeFaria DOT com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <3C866A0B.6040500@DeFaria.com>
User-Agent: Mutt/1.3.22.1i

On Wed, Mar 06, 2002 at 11:12:11AM -0800, Andrew DeFaria wrote:
> You imply that somebody has the ability to change user context! If so 
> then who is that somebody (USER)?

I have to tell that each week (day?) again, apparently.  It's SYSTEM.

> It's my understanding that the only thing(s) that use login are things 
> like telnet/rlogin/rsh.
> 
> Frustrated by the lack of su(1M)!

Did you ever try to understand NT security?  Otherwise you would
know know the cause for this restriction.  It's exceptionally not
because we're mean!

> Oh, BTW, here's a potential security problem:
> 
> $ rsh hosta id
> uid=1370(adefaria) gid=513(Domain Users) groups=0(Everyone),512(Domain 
> Admins),513(Domain 
> Users),1170(Everybody),1382(ITSupport),1354(Operations),1331(Software)
> $ rsh hosta -l otheruser id
> uid=1269(otheruser) gid=513(Domain Users) groups=0(Everyone),513(Domain 
> Users),1203(Engineering),1170(Everybody),2171(Product Team),1215(Service 
> Group),1331(Software),1298(TDM Group)
> 
>  How did I rsh as another user and not be prompted for a password?

Because you have an .rhosts file?  I assume you know how rsh
works on U*X systems, don't you?

Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Developer                                mailto:cygwin AT cygwin DOT com
Red Hat, Inc.

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/