X-Recipient: archive-cygwin AT delorie DOT com DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:from:to:subject:references:date:in-reply-to :message-id:mime-version:content-type; q=dns; s=default; b=LYezg 1GB6q//lDB/K2fF+kwAzlEvxxnS8HDHB+JY6xNiF6qa9k05NkUN3osjrp5NyV7z4 a5y7EZbqKRh6xJrwkw82CwqoafyDkzXH5hY43i4K+Xr86TZxLSVXODPQAybQiDQp H/FxAkf+hDXYj5I6ufAMK7q2BS/FuYUIqXumYU= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:from:to:subject:references:date:in-reply-to :message-id:mime-version:content-type; s=default; bh=1f3EcbSiaBI lKxX6iH6I0a/9XeE=; b=Yvc3hbgxgIY/Yjl3tT9nzjmvmhMArdp3XOyYVpRFV/O Tuv3U5R1vQ7/c0AY+5F77ZUgVhPTS+Nhaw3WzOBWP+azkEfbHDEMF1zlocd4sydK j4SHGu65EMRrrR0NvHLIFQBTwg4A/9AqaYaObMpqhf2Mdtq6CKH9rzrcpDJqsH5k = Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com Authentication-Results: sourceware.org; auth=none X-Spam-SWARE-Status: No, score=0.8 required=5.0 tests=BAYES_00,DNS_FROM_AHBL_RHSBL,SPF_PASS,TIME_LIMIT_EXCEEDED autolearn=unavailable version=3.3.1 spammy= X-HELO: mx009.vodafonemail.xion.oxcs.net From: Achim Gratz To: cygwin AT cygwin DOT com Subject: Re: Logging-in using ssh elevates the user privilege. References: <20190307010000 DOT fc28b73739c2dd66e609982b AT nifty DOT ne DOT jp> Date: Wed, 06 Mar 2019 19:33:17 +0100 In-Reply-To: <20190307010000.fc28b73739c2dd66e609982b@nifty.ne.jp> (Takashi Yano's message of "Thu, 7 Mar 2019 01:00:00 +0900") Message-ID: <87ftrz6efm.fsf@Rainer.invalid> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.1 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain Takashi Yano writes: > I would like to report a problem of recent cygwin. > > If a user logs in via ssh, the user aqcuires the elevated > privilege if the user belongs to Administrators group. This has been the case for as long as I use ssh logins and is by design. You can drop privileges after logon (see cygdrop), but not aquire new ones. So if that's changed behaviour for you, then your ssh logins didn't actually work the way you thought they were. Regards, Achim. -- +<[Q+ Matrix-12 WAVE#46+305 Neuron microQkb Andromeda XTk Blofeld]>+ SD adaptation for Waldorf rackAttack V1.04R1: http://Synth.Stromeko.net/Downloads.html#WaldorfSDada -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple