Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Message-ID: <3500515B75D9D311948800508BA379559507CA@EX-LONDON>
From: Vince Hoffman <Vince DOT Hoffman AT uk DOT circle DOT com>
To: "'Uwe Mayer'" <merkosh AT planet-interkom DOT de>, cygwin AT cygwin DOT com
Subject: RE: file permissions for /cygdrive/c
Date: Fri, 4 Oct 2002 09:47:30 +0100 
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"

the easiest way to fix your first problem is to change your primary group
and thus the group that owns files you create.
This is the 4th field in the /etc/passwd file.
Note here. my primary group is 10512 (domain administrators) while the
Administrator default group is 513 (none.)

Vince.Hoffman:unused_by_nt/2000/xp:11063:10512:Vince
Hoffman,U-CIRCLEUK\Vince.Hoffman,S-1-5-21-1382118675-421749423-1822239680-06
3:/home/Vince.Hoffman:/bin/bash

Administrator:unused_by_nt/2000/xp:500:513:U-CRLONTEST\Administrator,S-1-5-2
1-12
75210071-839522115-1202660629-500:/home/Administrator:/bin/bash

the number you need for the group you choose as the new default is the 3rd
field in the /etc/group file.

this could help with the rest of your problems but it sounds liek you need
to tie down your windows permissions which is doable but takes a bit of
reading and fiddling not to break anything.

-----Original Message-----
From: Uwe Mayer [mailto:merkosh AT planet-interkom DOT de]
Sent: 03 October 2002 23:42
To: cygwin AT cygwin DOT com
Subject: file permissions for /cygdrive/c


Hi,

I've got some questions regarding file permissions with cygwin under
w2k (ntsec turned on).
I want to use 2k together with cygwin while allowing other people to
login via ssh onto my computer and would like to get the obvious
loopholes closed.

As a member of the administrators group all files created not under
cygwin are owned by the group None. (--> User Guide)
Since *everyone* is member of None he will be able to access the files
/folder accordingly. Is there any way out of this except running cron
to regularly chown these files?

Also when creating a file i.e. from the cmd.exe (like dir >test) the
file permissions are "inherited" from the folder even although "Allow
inherritable file permissions" is turned off for that folder the file
is created in.
Is there any way out of that?

I organized my PC into two partitions. C carries the w2k system and
all the windows programs that need installation. D carries cygwin and
all "private" data. is there any way to prevent other users from
accessing a certain partition, i.e. /cygdrive/c/, creating new
mountpoints, etc.?

Thanks in advance!

Ciao
Uwe


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/