Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Message-ID: <BAY19-F126E7F4B3B7BE81A6A02DAB5200@phx.gbl>
X-Originating-Email: [karlm30 AT hotmail DOT com]
X-Sender: karlm30 AT hotmail DOT com
From: "Karl M" <karlm30 AT hotmail DOT com>
To: cygwin AT cygwin DOT com
Subject: cygrunsrv
Date: Mon, 25 Apr 2005 07:10:46 -0700
Mime-Version: 1.0
Content-Type: text/plain; format=flowed
X-OriginalArrivalTime: 25 Apr 2005 14:10:47.0154 (UTC) FILETIME=[93B38D20:01C549A0]
X-IsSubscribed: yes

Hi All...

In testing out my keychain service on a new XP system, I was thinking about 
all of the questions
that have shown up on the cygwin@... list in the past about launching a 
service from a user-id other than SYSTEM. And...I was wondering how you(s) 
felt about adding the ability for cygrunsrv to change user-id before running 
the target application.

Are there any negatives to doing it?

It seems that the security is no worse than having XP store passwords for 
the user-id's of the services.

Other than using OpenSSH as an example, is there any other guidance you 
would give?

Or...Corinna...if it is easy, is this something that you would consider 
adding?

Thanks,

...Karl



--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/