This is the mail archive of the mailing list for the Cygwin project.

Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

Re: setreuid

On Thu, Oct 16, 2003 at 05:23:39PM +0300, Baurjan Ismagulov wrote:
> On Thu, Oct 16, 2003 at 13:19:29, Corinna Vinschen wrote:
> > No, that's not right.  The German term for "increase quotas" is
> > "Anpassen von Speicherkontingenten fuer einen Prozess" (at least on
> > 2003 Server).  "Erstellen eines Tokenobjekts" is German for "Create
> > a token object".
> Hmmm, the document you pointed to mentions "act as part of the operating
> system", "replace process level token" and "increase quotas". Now I have
> the following privileges granted:
> Einsetzen als Teil des Betriebssystems                 ZAISAN\ibr
> Ersetzen eines Tokens auf Prozessebene                 ZAISAN\ibr
> Anpassen von Speicherkontingenten f?r einen Prozess    Administratoren
> Erstellen eines Tokenobjekts                           -
> ibr is a member of Administratoren.
> Logout, login, tftpd. The result is: setreuid(1012, 1012) = -1 EPERM.
> This works if I grant "Erstellen eines Tokenobjekts" to ZAISAN\ibr. What
> is going on?

That's correct.  Did you read

Btw., if you're planning to use that account as logon account, don't
give these rights to that account.  That's very dangerous.  Start a
service under system account as inetd and let it handle the user context


Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Developer                      
Red Hat, Inc.

Unsubscribe info:
Problem reports:

Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]