Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain; charset="US-ASCII"
Subject: RE: security and cygwin
Date: Mon, 20 Sep 2004 11:08:57 -0500
Message-ID: <B9721831E371CD4F84C4F5E87476D356FB81BE@iu-mssg-mbx04.exchange.iu.edu>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
From: "Koskie, Sarah" <skoskie AT iupui DOT edu>
To: "Cygwin List" <cygwin AT cygwin DOT com>
X-OriginalArrivalTime: 20 Sep 2004 16:08:57.0288 (UTC) FILETIME=[221C6480:01C49F2C]
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by delorie.com id i8KG9S0M014704

<snip>
> >Are there any other security related issues I should know about?  I
have
> >to assume that cygwin as installed is safe until I have time to look
> >into it, so I am hoping that my faith is not misplaced.
> 
> 
> Strange that you should ask this question now, since you admit to
using
> Cygwin prior to all this and apparently this wasn't a concern then.
No
> matter.  See the FAQ entry:
> 
> How secure is Cygwin in a multi-user environment?
> <http://cygwin.com/faq/faq_toc.html#TOC78>
> 

Thanks, but that does not answer my question.  I do not know what
daemons are running.  I did not start any.  I assume some are started in
the installation process but I don't know how to find out which they
are.  I just searched the FAQs for any other mention of "daemon" and
found none.  I have also checked the User's guide but it does not seem
to contain any relevant info that I can see.  There should never be any
users logged in remotely to my cygwin and if there is something I have
to do to enforce that, that's part of what I want to know.  I should
also be the only one using sftp, ssh, etc. With the previous version of
cygwin, I was able to sftp and ssh from cygwin to other machines but not
from other machines to  my desktop computer.  I hope that is still the
case.  I'll check it eventually, but as mentioned, I have a
more-than-full time job as other than an UNIX programmer or system
administrator and I cannot just stop and spend a month setting up
cygwin.  In the past I didn't have to.  The lack of relevant
documentation and the complexity of the current setup and install
process are extremely frustrating. 



--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/