Re: Problems on accessing Windows network resources

["Pierre A. Humblet" <Pierre dot Humblet at ieee dot org>]

Corinna,

here is the slight reimplementation of ntsec promised in 
<http://cygwin.com/ml/cygwin-patches/2003-q2/msg00182.html>
to avoid having cygwin_set_impersonation_token potentially 
wiping out the current token.
 
During testing I found some nits, e.g. when ftp does a ls of
a networked directory with 1.5, the owner is given as SYSTEM.
That comes from the way seteuid now propagates to child processes
and that's why get_file_attribute() is changed to report the 
effective ids.

Pierre

2003-07-12  Pierre Humblet  <pierre.humblet@ieee.org>

	* cygheap.h (enum impersonation): Delete.
	(cygheap_user::impersonation_state): Delete.
	(cygheap_user::current_token): New.
	(cygheap_user::issetuid): Modify to use current_token.
	(cygheap_user::token): Ditto.
	(cygheap_user::deimpersonate): Ditto.
	(cygheap_user::reimpersonate): Ditto.
	(cygheap_user::has_impersonation_tokens): Ditto.
	(cygheap_user::close_impersonation_tokens): Ditto.
	* security.cc (cygwin_set_impersonation_token): Always set the token.
	(verify_token): Change type of gsid to cygpsid.
	(get_file_attribute): Use the effective ids.
	* syscalls.cc (seteuid32): Modify to use cygheap_user::current_token.
	* uinfo.cc (uinfo_init) Do not set cygheap->user.impersonation_state.

Attachment: sec.diff
Description: Text document