X-Spam-Check-By: sourceware.org
Message-ID: <4535D0CE.80909@cwilson.fastmail.fm>
Date: Wed, 18 Oct 2006 02:59:26 -0400
From: Charles Wilson <cygwin AT cwilson DOT fastmail DOT fm>
User-Agent: Thunderbird 1.5.0.7 (Windows/20060909)
MIME-Version: 1.0
To: The Cygwin Mailing List <cygwin AT cygwin DOT com>
Subject: Re: Updated: OpenSSH-4.4p1-1
References: <20061004144640 DOT GD25401 AT calimero DOT vinschen DOT de> <DE31A43DBCABD64A9397DDFD45B8922005718EA4 AT 0015-its-exmb01 DOT us DOT saic DOT com> <20061012071004 DOT GQ13105 AT calimero DOT vinschen DOT de> <452FAECD DOT 3000202 AT cwilson DOT fastmail DOT fm> <20061016074601 DOT GB18442 AT calimero DOT vinschen DOT de>
In-Reply-To: <20061016074601.GB18442@calimero.vinschen.de>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com

Corinna Vinschen wrote:
> On Oct 13 11:20, Charles Wilson wrote
>> This is bad.  Suppose I am a cygwin user on a machine to which I do not 
>> have Administrator privileges.  Until now, I could run a personal sshd 
>> on a unique port, and connect back to my windows box.  Now I can't -- 
>> because, as a non-Admin, I can't create the sshd user.  (and this use 
>> case is not a hypothetical; I do this on the job often)
> 
> You can create a fake sshd account in /etc/passwd, using your own account.
> Other than that, I agree.  It's not exactly a nice change.

Okay, that's good to know -- we have a workaround for cygwin (assuming I 
have write-access to /etc/passwd...)  I still think this could cause 
issues for non-priveleged uses on other platforms, tho.  But that's a 
topic for another list.

--
Chuck



--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/