Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Message-ID: <01c601c35b59$1fbaf930$6902a8c0@markonius>
From: "Mark Priest" <mark DOT priest AT computer DOT org>
To: <cygwin AT cygwin DOT com>
References: <02f301c35b4a$8e792f40$017c883e AT starfruit>
Subject: Re: Controversial what if.... we disable ntsec by default again?
Date: Tue, 5 Aug 2003 09:54:43 -0400
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2800.1106

Max,

What problems is ntsec causing?  I am a relatively new user and I have not
had any problems with it.  In fact it is allowing me to host a more secure
ssh server installation.  I have been following the list for a couple of
months and I have not seen many problems relating to ntsec.  Most of those
that I have seen regarding ntsec seem to stem from configuration errors by
users rather than from anything inherent in ntsec.  It is hard to comment on
this without knowing what the specific issues are.

Thanks,
Mark



----- Original Message -----
From: "Max Bowsher" <maxb AT ukf DOT net>
To: <cygwin AT cygwin DOT com>
Sent: Tuesday, August 05, 2003 8:10 AM
Subject: Controversial what if.... we disable ntsec by default again?


> Having ntsec on by default has shown us that the imperfect mapping between
> ACLs and file modes can cause a *lot* of problems. Essentially, for ntsec
to
> be useful, a fair amount of caring for permissions is required. New users
> are often not prepared for this. Hence: what about making ntsc off by
> default again?
>
>
> If not, I guess the ntsec code needs to be spun off into a seperate
library,
> where setup can get at it too.
>
>
> Max.
>
>
> --
> Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
> Problem reports:       http://cygwin.com/problems.html
> Documentation:         http://cygwin.com/docs.html
> FAQ:                   http://cygwin.com/faq/
>



--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/