Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com Date: Thu, 16 Oct 2003 17:23:39 +0300 From: Baurjan Ismagulov To: cygwin AT sources DOT redhat DOT com Subject: Re: setreuid Message-ID: <20031016142337.GC5542@ata.cs.hacettepe.edu.tr> Mail-Followup-To: cygwin AT sources DOT redhat DOT com References: <20031015105210 DOT GF18774 AT ata DOT cs DOT hacettepe DOT edu DOT tr> <20031016103723 DOT GA5542 AT ata DOT cs DOT hacettepe DOT edu DOT tr> <20031016125317 DOT GB5542 AT ata DOT cs DOT hacettepe DOT edu DOT tr> Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <20031016125317.GB5542@ata.cs.hacettepe.edu.tr> User-Agent: Mutt/1.5.4i On Thu, Oct 16, 2003 at 13:19:29, Corinna Vinschen wrote: > No, that's not right. The German term for "increase quotas" is > "Anpassen von Speicherkontingenten fuer einen Prozess" (at least on > 2003 Server). "Erstellen eines Tokenobjekts" is German for "Create > a token object". Hmmm, the document you pointed to mentions "act as part of the operating system", "replace process level token" and "increase quotas". Now I have the following privileges granted: Einsetzen als Teil des Betriebssystems ZAISAN\ibr Ersetzen eines Tokens auf Prozessebene ZAISAN\ibr Anpassen von Speicherkontingenten für einen Prozess Administratoren Erstellen eines Tokenobjekts - ibr is a member of Administratoren. Logout, login, tftpd. The result is: setreuid(1012, 1012) = -1 EPERM. This works if I grant "Erstellen eines Tokenobjekts" to ZAISAN\ibr. What is going on? With kind regards, Baurjan. -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/