Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
To: cygwin AT cygwin DOT com
From: Thorsten Kampe <thorsten AT thorstenkampe DOT de>
Subject:  Re: AllVersions: Running Cygwin X w/ Registy Entries
Date:  Wed, 26 Oct 2005 20:14:34 +0100
Lines: 17
Message-ID:  <1e9ifv5iyvszt$.1mvv72nqwf2cg$.dlg@40tude.net>
References:  <b4pbgnamlpal DOT 1c8pbv7kbbf9j DOT dlg AT 40tude DOT net> <SERRANOzxTs53iVdGJ500000268 AT SERRANO DOT CAM DOT ARTIMI DOT COM>
Mime-Version:  1.0
Content-Type:  text/plain; charset="us-ascii"
Content-Transfer-Encoding:  7bit
User-Agent: 40tude_Dialog/2.0.15.1
X-IsSubscribed: yes

* Dave Korn (2005-10-26 19:45 +0100)
> Thorsten Kampe wrote:
>> * Chris Taylor (2005-10-26 17:38 +0100)
>>> Problem with that is that if the sysadmin knows what he's doing, it only
>>> takes about 4 seconds to block off almost all possible ways of actually
>>> editing the registry...
>> 
>> Definitely not. 
> 
>   Oh yes it does.  Start->Run->regedit.  Right-click the user's tree under
> HKEY_USERS, choose Permissions, remove their write access leaving them a
> read-only per-user registry tree.  Easily done in 4 seconds by an experienced
> BOFH, and can't be reversed without admin rights!

Yea, sure. And how many programms will you be able to run in that
configuration? Will you even be able to logon? Anyway: mount won't
work in that scenario either (because it modifies the registry).


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/