X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:date:from:mime-version:to:subject
	:references:in-reply-to:content-type:content-transfer-encoding
	:reply-to; q=dns; s=default; b=G40DxPKKnWIksFjTWR9TILUA3FTQ5jYwL
	w0XInt/6YlCdRrO9FRg2MRxtFHvjFb+SlDsrBJeUuzQmsyBcd/2CnPZ01dAZy8dK
	q5cH8Fcc0pqljw1Yoxc4dmn+JrOvBPprHW7TqOfhN2rF7HsSIw7DVusg6Q0iGY9h
	a78qt/be1g=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:date:from:mime-version:to:subject
	:references:in-reply-to:content-type:content-transfer-encoding
	:reply-to; s=default; bh=bgY/09UPrKH8VoAEPilQ23QNmWA=; b=uR0Lj6l
	VCv8PzjsKhK0jM4Miv8WkTIgKM9n+IdT/wIZqg/icG8fPR5SvWcvdeDlzylT3O01
	FQrXqpCO7EwgeKaWZlKUQ2NNLCWRfxMgGKV/CU3+EOkw7RcPrC+1LvzHo6WoizqI
	eTmQNwdIOqquRSEErHAoe5jF+IK0nYtLieEY=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
X-Spam-SWARE-Status: No, score=-2.1 required=5.0 tests=AWL,BAYES_00,KHOP_THREADED,TW_NL autolearn=ham version=3.3.1
X-MDAV-Result: clean
X-MDAV-Processed: mail.secure-endpoints.com, Thu, 04 Apr 2013 12:23:24 -0400
X-Spam-Processed: mail.secure-endpoints.com, Thu, 04 Apr 2013 12:23:23 -0400	(not processed: message from trusted or authenticated source)
X-Return-Path: jaltman AT openafs DOT org
X-Envelope-From: jaltman AT openafs DOT org
X-MDaemon-Deliver-To: cygwin AT cygwin DOT com
Message-ID: <515DA8F9.9000208@openafs.org>
Date: Thu, 04 Apr 2013 12:23:21 -0400
From: Jeffrey Altman <jaltman AT openafs DOT org>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20130328 Thunderbird/17.0.5
MIME-Version: 1.0
To: cygwin AT cygwin DOT com
Subject: Re: winln for native symlinks
References: <515BD718 DOT 8080605 AT dancol DOT org> <515BE1BF DOT 5010803 AT towo DOT net> <515BE36F DOT 6030701 AT dancol DOT org> <515DA0D9 DOT 7050209 AT towo DOT net>
In-Reply-To: <515DA0D9.7050209@towo.net>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Reply-To: jaltman AT openafs DOT org

On 4/4/2013 11:48 AM, Thomas Wolff wrote:
> It shows this error message:
> winln: you don't permission to create symbolic links. Run, as
> administrator,
> winln:   editrights -a SeCreateSymbolicLinkPrivilege -a $YOUR_USER
> which should be fixed somehow like this:
> You don't have permission to create symbolic links. Run, as administrator,
>         editrights -a SeCreateSymbolicLinkPrivilege -u $USER
> Moreover, this advice does not help. Even after having issued this
> command as administrator, winln -s still works as administrator only.

The SeCreateSymbolicLinkPrivilege privilege is filtered by User Account
Control (UAC).  If your account is a member of the "Administrators"
group, then the process needs to be run with your elevated credentials
in order to make use of the SeCreateSymbolicLinkPrivilege privilege.

The "Administrator" account always runs in an elevated state and
accounts that are not members of the "Administrators" group do not have
their security tokens filtered by UAC.

Does Cygwin permit binaries to be built with manifests?  If so,
winln.exe could include an embedded manifest that indicates that
elevated status is required.  The user would then be prompted by UAC
whenever the command is used.

Jeffrey Altman



--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple