supplement cygwin_logon_user with CreateProcessWithLogonW?
Chris January
chris@atomice.net
Wed Sep 18 10:13:00 GMT 2002
> > CreateProcessWithLogonW (as opposed to the LogonUser /
> CreateProcessAsUser)
> > combination. This is because CreateProcessWithLogonW utilises the RunAs
> > (2000)/SecondaryLogon (XP) service. Would it make sense to
> modify Cygwin so
> > this could be used in place of cygwin_logon_user if one so
> wished? If so,
> > I'll go about creating a patch.
>
> Hmm, how are you planning to do that? Which application do you have in
> mind to use that functionality, su?
su was the main one.
>
> Oh, btw., do you have a pointer to MS documentation which talks about
> CreateProcessWithLogonW() utilizing RunAs? I have not found a word of
> that in MSDN. Just curious.
It's not documented - but Microsoft said this function used the RunAs
service when the RunAs pipe authentication vulnerability was discovered.
First hint: Function is in advapi32.lib, not kernel32.lib.
Second hint: No extra priveleges required.
There is also a CreateProcessWithTokenW available with .NET server.
Chris
--
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
Bug reporting: http://cygwin.com/bugs.html
Documentation: http://cygwin.com/docs.html
FAQ: http://cygwin.com/faq/
More information about the Cygwin
mailing list