This is the mail archive of the
cygwin@cygwin.com
mailing list for the Cygwin project.
Re: Problem with Station/Desktop permissions
- From: "Marius Seritan" <mseritan at jacent dot com>
- To: <lhall at rfk dot com>,<cygwin at cygwin dot com>
- Date: Tue, 8 Oct 2002 08:06:19 -0700
- Subject: Re: Problem with Station/Desktop permissions
- References: <4910-220021028145424256@M2W044.mail2web.com>
Larry and cygwin-list readers,
In my own code I am using the fksec C++ library, http://www.mvps.org/win32/security/fksec.html. I am not sure if people are willing to link that library in cygwin. In the affirmative I can suggest a patch to the list that would add the appropriate ACEs to the Station and Desktop SDs, instead of replacing them with a null SD.
Note that I am not an NT security expert, I can only contribute some code that is working for me.
Marius
----- Original Message -----
From: <lhall@pop.ma.ultranet.com>
To: <mseritan@jacent.com>; <cygwin@cygwin.com>
Sent: Tuesday, October 08, 2002 7:54 AM
Subject: RE: Problem with Station/Desktop permissions
Hi Marius,
I don't believe there is any active work going on in the area that you
mention. It seems to change and improve on an "as-needed" basis based
on bug reports and the like. If you are interested in suggesting a
patch, I'm sure the list would be interested in reviewing your ideas.
Larry
Original Message:
-----------------
From: Marius Seritan mseritan@jacent.com
Date: Mon, 7 Oct 2002 14:32:47 -0700
To: cygwin@cygwin.com
Subject: Problem with Station/Desktop permissions
<snip>
From what I see from the sources, cygwin is also adjusting the permissions
on the station\desktop. The approach taken in spawn.cc is a lot more
radical though, the security descriptor is basically blown away. This seems
to break my code.
Has anybody else encountered this problem? Are there plans to move to a
more nuanced approach when adjusting the permissions on the window
stations/desktop?
Thanks for any pointers/comments.
Marius Seritan
Engineering
mseritan@jacent.com
--------------------------------------------------------------------
mail2web - Check your email from the web at
http://mail2web.com/ .