Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
From: "Mikkel Rostock" <mikkel AT nsales DOT dk>
To: <cygwin AT cygwin DOT com>
Subject: RE: Windows hardening and system paths
Date: Tue, 16 Aug 2005 13:31:52 +0200
Message-ID: <!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAA5Mn/gf2eOki1anFw3+Z8M8KAAAAQAAAAbM6UyHlNfkanHrRQOpq2kAEAAAAA@nsales.dk>
MIME-Version: 1.0
Content-Type: text/plain; 	charset="US-ASCII"
Content-Transfer-Encoding: 7bit
In-reply-to: <43009413.BF098215@dessent.net>

Hello again,


The problem at hand is basically that when I try to start the service, it
freezes and logs this error:

cygrunsrv: Error starting a service: QueryServiceStatus:  Win32 error 1053:
The service did not respond to the start or control request in a timely
fashion.

I figured that this must be due to a security issue regarding the hardening
of this particular server which is located in a DMZ. Because it is placed in
a DMZ all possible high-risk DLLs are physically moved to a different
location from where they must be executed.

I have searched all over for other people having the same problem, but it
doesn't seem that anyone has encountered this before.


Best Regards
Mikkel Rostock
-----Original Message-----
From: Brian Dessent [mailto:brian AT dessent DOT net] 
Sent: 15. august 2005 15:10
To: cygwin AT cygwin DOT com
Subject: Re: Windows hardening and system paths

Mikkel Rostock wrote:

> However, I have searched all over to find out where to add the path, and
as
> you state "just put it in the path" - but where? - In Windows registry or
in
> a Cygwin config file?

The path is the path.  It doesn't matter how you add it there, as long
as the DLLs are in the path when you run the program you're trying to
run.  You can add it using the windows dialog in the control panel or
you can modify it in cygwin.bat before starting a Cygwin session, or any
other way.

But I have to wonder... I don't think it would be possible for windows
to work *without* the %windir%\system32 directory in the path.  I sure
haven't ever seen such a system that didn't have that in the path
already.  There are numerous DLLs there that every windows program
requires, and there is nothing special about Cygwin in this regard.  If
notepad runs then cygwin should run too -- as far as the system DLLs are
concerned.

Brian



--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/