X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:to:from:subject:date:message-id:references
	:mime-version:content-type:content-transfer-encoding; q=dns; s=
	default; b=A+lAWGnlcN6ewSaVvj/oQqhdtM/i4m5m/Lznd4oSbbUfNUTZYYJbE
	T/WmNjkPVfQclRMJjr7YwnQjvRzDDuRDq103BiMgP/y2hiKJ25x8j8pDsEfWbU1X
	SG+S/tps3QUbUftzp+8dMKTZ+Mc/eRfjEqslZuIgoyHAFn0ks31Qkk=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:to:from:subject:date:message-id:references
	:mime-version:content-type:content-transfer-encoding; s=default;
	 bh=K8o7DQ5O4FJ4uNeq6+JhW2MuOJA=; b=lsnoInc1ilVLYw0zPXOtB3AKazie
	SeTRPWfcMJPTAhpIdjACHzxXJ4cQSe24PPPmHjYBx6gV71423lncq+cLUlVsKEiJ
	Nmbnj+C/oSy9PfqKuS5L6VYRv1i2oF6Fg1Bk4BUO69jPVESeWRPOCuuRsvnHwjMt
	1WmwjLuvFZG2ZWA=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-0.5 required=5.0 tests=AWL,BAYES_50,RCVD_IN_DNSWL_LOW,RP_MATCHES_RCVD,SPF_HELO_PASS,SPF_PASS autolearn=ham version=3.3.2
X-HELO: plane.gmane.org
To: cygwin AT cygwin DOT com
From: "D. Boland" <daniel AT boland DOT nl>
Subject: Re: The eternal uid issue
Date: Mon, 28 Jul 2014 13:42:50 +0200
Lines: 32
Message-ID: <53D6373A.193E3E47@boland.nl>
References: <53CF6CEC DOT 6D68E485 AT boland DOT nl> <20140723091409 DOT GH27005 AT calimero DOT vinschen DOT de> <53CF9E0F DOT F596FC60 AT boland DOT nl> <20140723152357 DOT GA24446 AT calimero DOT vinschen DOT de> <53D0AD3A DOT 1FDF0B3F AT boland DOT nl> <20140724135222 DOT GD12212 AT calimero DOT vinschen DOT de> <53D17DCD DOT 726524E0 AT boland DOT nl> <20140725124200 DOT GC8725 AT calimero DOT vinschen DOT de> <53D604BC DOT 1CBD4557 AT boland DOT nl> <20140728091409 DOT GA25860 AT calimero DOT vinschen DOT de>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-IsSubscribed: yes

Hi Corinna,

Corinna Vinschen wrote:
> 
> Still, are you using setuid method 1 or another method?  Is your home
> dir the default /home/$USER as created from inside the Cygwin
> environment?  Any chance your home dir has an unusual ACL?
> 
> Did you set up sshd as service?  If not, you might consider to do that
> so you can check what happens when switching to the smmsp account.  Run
> ssh-host-config as admin, install the service.  Create an authorized_keys
> file for the smmsp user (run ssh-user-config under smmsp for instance),
> then start the service.  Now login to the smmsp user account using
> public key authentication, admin-enabled vs. non-admin as above(*), and
> observe the permissions ls or stat show you for your home dir.  Are they
> really different?  If so, let's see the strace output again.

Argh! I checked the /home folder and it was indeed group and world writable. After
setting it to 0755 sendmail had no issues anymore. Sendmail checks permissions on
the entire path. I cannot remember setting it 0777, so something else must have set
it.

Regarding the suid method: You mean method 1, 2 and 3 in the "Using Windows security
in Cygwin" article, right? I have nothing special set up, so it uses the default
method 1.

As to the sshd, I had it set up as a service already.

Thanks again for your help. I will announce the Sendmail release soon.

Cincerely,
Daniel


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple