X-Recipient: archive-cygwin AT delorie DOT com
X-Original-To: cygwin AT cygwin DOT com
Delivered-To: cygwin AT cygwin DOT com
DMARC-Filter: OpenDMARC Filter v1.3.2 sourceware.org 36EB23858022
Authentication-Results: sourceware.org; dmarc=none (p=none dis=none)
 header.from=SystematicSw.ab.ca
Authentication-Results: sourceware.org;
 spf=none smtp.mailfrom=brian DOT inglis AT systematicsw DOT ab DOT ca
X-Authority-Analysis: v=2.4 cv=LvQsdlRc c=1 sm=1 tr=0 ts=5fe4e813
 a=kiZT5GMN3KAWqtYcXc+/4Q==:117 a=kiZT5GMN3KAWqtYcXc+/4Q==:17
 a=IkcTkHD0fZMA:10 a=94nOnFI1EgyDtX4ev68A:9 a=QEXdDO2ut3YA:10
Subject: Re: sendmail/setuid
To: cygwin AT cygwin DOT com
References: <87h7ob312r DOT wl-tomas AT basun DOT net>
From: Brian Inglis <Brian DOT Inglis AT SystematicSw DOT ab DOT ca>
Organization: Systematic Software
Message-ID: <d657663f-d91e-3465-5feb-2ce966d18d01@SystematicSw.ab.ca>
Date: Thu, 24 Dec 2020 12:12:17 -0700
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101
 Thunderbird/78.6.0
MIME-Version: 1.0
In-Reply-To: <87h7ob312r.wl-tomas@basun.net>
Content-Language: en-CA
X-CMAE-Envelope: MS4xfMryR2fN1q+rpkOi+UPaIelLQYP4GoIDlfL619F74lka75rDdZfOqQmB+nPv1EtPYn/2zNcqhMdMqlAIztkXbqhleGZ8Q28J2DUuxNlUfEDt/+ZKwJGL
 7PR9qxnnJe8sGtIOXLKm4X0HS7UnJaA+Gt6SxVlAiaIhGtqr/EB2GYXdqc76/wjcUrzqH65Gkp0KsZY/xYJuNO1xWMe5f9VIyWI=
X-Spam-Status: No, score=-6.9 required=5.0 tests=BAYES_00, KAM_DMARC_STATUS,
 KAM_LAZY_DOMAIN_SECURITY, NICE_REPLY_A, RCVD_IN_DNSWL_LOW, RCVD_IN_MSPIKE_H3,
 RCVD_IN_MSPIKE_WL, SPF_HELO_NONE, SPF_NONE,
 TXREP autolearn=ham autolearn_force=no version=3.4.2
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on
 server2.sourceware.org
X-BeenThere: cygwin AT cygwin DOT com
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Unsubscribe: <https://cygwin.com/mailman/options/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=unsubscribe>
List-Archive: <https://cygwin.com/pipermail/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe: <https://cygwin.com/mailman/listinfo/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
Reply-To: cygwin AT cygwin DOT com
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="us-ascii"; Format="flowed"
Errors-To: cygwin-bounces AT cygwin DOT com
Sender: "Cygwin" <cygwin-bounces AT cygwin DOT com>

On 2020-12-24 04:17, Tomas By wrote:
> I'm using the Cygwin Sendmail (8.14), and am getting this in the log
> file of a program that is supposed to send an email.
> 
> | 451 4.0.0 drop_privileges: setuid(18) failed: Operation not permitted
> | RSET
> | 250 2.0.0 Reset state
> 
> Does this come from Cygwin? It would be odd if it is from the program.
> 
> There is no user 18. The Windows user id's (I think) are 500, 501,
> 1000, 1002, 1003.

$ getent passwd 18
SYSTEM:*:18:18:U-NT AUTHORITY\SYSTEM,S-1-5-18:/home/SYSTEM:/bin/bash

> What is the simplest solution?
> 
> I had it working before I reinstalled, but I tried many things, most
> of which I do not want to repeat.
Process or program may need to be run elevated with admin privileges, or 
configured to not require them if that is even possible.
The easiest way to do that I have found is to create a Windows task to run 
elevated (with highest privileges) under user SYSTEM and run a shell invoking a 
shell script.
The task may then start up Cygwin services to run elevated under user SYSTEM or 
however each is configured.

-- 
Take care. Thanks, Brian Inglis, Calgary, Alberta, Canada

This email may be disturbing to some readers as it contains
too much technical detail. Reader discretion is advised.
[Data in binary units and prefixes, physical quantities in SI.]
--
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple