This is the mail archive of the
cygwin
mailing list for the Cygwin project.
Re: CSIH file permission tests on non-NTFS broken (was Re: ssh-host-config script fails)
Chuck?
On Jul 24 11:22, Corinna Vinschen wrote:
> Hi Chuck,
>
> On Jul 23 18:34, Corinna Vinschen wrote:
> > On Jul 23 11:25, Matt Kemmerer wrote:
> > > Administrator@ics-dp35xppro ~
> > > $ ssh-host-config
> > > *** Info: Creating default /etc/ssh_config file
> > > *** Query: Overwrite existing /etc/sshd_config file? (yes/no) yes
> > > *** Info: Creating default /etc/sshd_config file
> > > *** Info: Privilege separation is set to yes by default since OpenSSH
> > > 3.3.
> > > *** Info: However, this requires a non-privileged account called 'sshd'.
> > > *** Info: For more info on privilege separation read
> > > /usr/share/doc/openssh/README.privsep.
> > > *** Query: Should privilege separation be used? (yes/no) yes
> > > *** Warning: The owner and the Administrators need
> > > *** Warning: to have .w. permission to /var/run.
> > > *** Warning: Here are the current permissions:
> > > *** Warning: drwxr-xr-x 2 Administrator None 0 Jul 23 10:21 /var/run
> > > *** Warning: Please change the user and/or group ownership and
> > > *** Warning: permissions of /var/run.
> > > *** ERROR: Problem with /var/run directory. Exiting.
> > >
> > > I've tried changing the permissions on /var/run but the commands chgrp
> > > and chmod both produce no error but do not change the permissions
> > > either.
> >
> > Eeek! You're using FAT32 on a NT based OS? This isn't such a good
> > idea, actually. There's no security and no permission settings on FAT.
> > The csih script seems to miss the fact that the directory is on a
> > non-NTFS drive which isn't capable of setting permissions. Given that
> > you're installing ssh, which is a paranoid secure playing package,
> > that's actually a good idea. Ever thought of running convert.exe on
> > your drive? ;)
> >
> > Nevertheless that should be changed in csih.
>
> Could you have a look into this, please?
>
>
> Thanks,
> Corinna
>
> --
> Corinna Vinschen Please, send mails regarding Cygwin to
> Cygwin Project Co-Leader cygwin AT cygwin DOT com
> Red Hat
>
> --
> Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
> Problem reports: http://cygwin.com/problems.html
> Documentation: http://cygwin.com/docs.html
> FAQ: http://cygwin.com/faq/
--
Corinna Vinschen Please, send mails regarding Cygwin to
Cygwin Project Co-Leader cygwin AT cygwin DOT com
Red Hat
--
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
Problem reports: http://cygwin.com/problems.html
Documentation: http://cygwin.com/docs.html
FAQ: http://cygwin.com/faq/