This is the mail archive of the cygwin@cygwin.com mailing list for the Cygwin project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]

Re: (Fwd) CYGWIN=nontsec nontea ???


On Fri, May 04, 2001 at 07:35:43PM +0200, Gerrit P. Haase wrote:
> 
> That is dubios...
> will it work if i set ntsec and ntea?
> 
> root@ISMENE ~
> $ id
> uid=500(root) gid=544(root) groups=544(root)
> 
> root@ISMENE ~
> $ /usr/sbin/fetchnews -vvv
> /usr/sbin/fetchnews: must be run as news or root
> 
> 
> >From the source:
> 
>     setgid( pw->pw_gid );
>     setuid( pw->pw_uid );
>     if ( getuid() = pw->pw_uid || getgid() = pw->pw_gid ) {
                   ^^^                      ^^^
		   These both shouldn't work here.

>         fprintf( stderr, "%s: must be run as news or root\n", progname );
>         return FALSE;
>     }
> 
> Is getuid or getgid not working on cygwin?

Nope, it's setuid which can't change the user context without
a password. Result: The uid isn't changed...

Did you read the ntsec chapter in the users guide?

Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Developer                                mailto:cygwin@cygwin.com
Red Hat, Inc.

--
Want to unsubscribe from this list?
Check out: http://cygwin.com/ml/#unsubscribe-simple


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]