Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Date: Thu, 27 Jun 2002 13:28:10 -0400 (EDT)
From: Chris Metcalf <metcalf AT incert DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: [ANNOUNCEMENT] Re: Updated: OpenSSH-3.4p1-1
In-Reply-To: <20020627163858.AE8BD1B5E3@redhat.com>
Message-ID: <Pine.LNX.4.44.0206271325040.5437-100000@rd.incert.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII

On Thu, 27 Jun 2002, Corinna Vinschen wrote:
> The Cygwin version modifies that test so that if /var/empty resides
> on a FAT or FAT32 filesystem, or if ntsec is not activated, the
> ownership isn't tested at all.  If /var/empty is on a NTFS filesystem
> and ntsec is switched on, the ownership is checked against the user
> running sshd.

Thanks.  This was indeed the problem (I'm running ntfs, ntsec).

I saw your note about one small change and it didn't occur to that it was
exactly the one thing that I went into the "official" sources in search of!

Some words to this effect should go into /usr/doc/openssh/README.privsep
as well, since it still talks about a "chown root:sys /var/empty" being
required.

                Chris Metcalf -- InCert Software -- 1 (617) 621 8080
                metcalf AT incert DOT com -- http://www.incert.com/~metcalf


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/