Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Reply-To: Cygwin List <cygwin AT cygwin DOT com>
Message-Id: <6.1.0.6.0.20040919191318.02a1a450@pop.prospeed.net>
X-Sender: 
Date: Sun, 19 Sep 2004 19:28:31 -0400
To: "Koskie, Sarah" <skoskie AT iupui DOT edu>, <cygwin AT cygwin DOT com>
From: Larry Hall <lh-no-personal-replies-please AT cygwin DOT com>
Subject: Re: FW: problems with new installation, followon to my questions of Sept 14, 20:22
In-Reply-To: <B9721831E371CD4F84C4F5E87476D356C8A4CE@iu-mssg-mbx04.excha nge.iu.edu>
References: <B9721831E371CD4F84C4F5E87476D356C8A4CE AT iu-mssg-mbx04 DOT exchange DOT iu DOT edu>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"

At 02:59 PM 9/18/2004, you wrote:

<snip>


>Gosh this is irritating.  I did not intentionally send 'mime type
>"text/html"'.  Ok, fixed that annoying Outlook default "feature".  Do
>you recommend Mozilla Thuderbird?

<sic>.  Sure do! :-)


>------------------------------------------
>
>From: Koskie, Sarah 
>Sent: Saturday, September 18, 2004 1:10 PM
>To: 'xxx AT xxx DOT xxx'


<http://cygwin.com/acronyms/#PCYMTNQREAIYR>


>Subject: FW: problems with new installation, followon to my questions of
>Sept 14, 20:22
>
>Ok, I tried to send the output of cygcheck as an attachment, but your
>mailer refused it.  I have included it at the end of the message.


Please don't do that.  If you attach a file with the simple text output
of 'cygcheck -srv', the list's mailer will pass it through just fine.




<snip>


>In /etc/passwd, there are the following "users":  SYSTEM,
>Administrators, HelpAssistant, ntguest, SUPPORT_388945a0, testman in
>addition to me.  Since no one but me is supposed to be using cygwin, and
>our computer services people certainly aren't going to help support it,
>should I delete some of these users, and if so, what is the appropriate
>procedure?


Leave this stuff as is.  If you feel you must make a change here, SYSTEM and
Administrators are required users for Windows, so I don't recommend deleting
them.  The rest are peculiar to your environment.  But *all* of these users
are Windows users.  If you don't want any or all to show up under Cygwin, 
your best bet is to remove them via Windows and regenerate your '/etc/passwd'
(mkpasswd -l >/etc/passwd) and '/etc/group' (mkgroup -l >/etc/group).  


>Are there any other security related issues I should know about?  I have
>to assume that cygwin as installed is safe until I have time to look
>into it, so I am hoping that my faith is not misplaced.


Strange that you should ask this question now, since you admit to using 
Cygwin prior to all this and apparently this wasn't a concern then.  No 
matter.  See the FAQ entry:

How secure is Cygwin in a multi-user environment?
<http://cygwin.com/faq/faq_toc.html#TOC78>



--
Larry Hall                              http://www.rfk.com
RFK Partners, Inc.                      (508) 893-9779 - RFK Office
838 Washington Street                   (508) 893-9889 - FAX
Holliston, MA 01746                     


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/