Windows 2003

[Corinna Vinschen]

On Thu, Jul 10, 2003 at 03:07:04PM -0400, Pierre A. Humblet wrote:
> I assume you have run your token printing routine on the thread token,
> after the setuid (fishing expedition, just to see..)

Sure.

token privilege of service process under SYSTEM:

  SeAuditPrivilege
  SeBackupPrivilege
  SeAssignPrimaryTokenPrivilege
  SeChangeNotifyPrivilege
  SeCreateGlobalPrivilege
  SeCreatePagefilePrivilege
  SeCreatePermanentPrivilege
  SeDebugPrivilege
  SeImpersonatePrivilege
  SeIncreaseBasePriorityPrivilege
  SeIncreaseQuotaPrivilege
  SeLoadDriverPrivilege
  SeLockMemoryPrivilege
  SeManageVolumePrivilege
  SeProfileSingleProcessPrivilege
  SeRestorePrivilege
  SeSecurityPrivilege
  SeShutdownPrivilege
  SeSystemEnvironmentPrivilege
  SeSystemtimePrivilege
  SeTakeOwnershipPrivilege
  SeTcbPrivilege
  SeUndockPrivilege

token privilege of service process under my special account:

  SeBackupPrivilege
  SeChangeNotifyPrivilege
  SeCreateGlobalPrivilege
  SeCreatePagefilePrivilege
  SeCreateTokenPrivilege
  SeDebugPrivilege
  SeImpersonatePrivilege
  SeIncreaseBasePriorityPrivilege
  SeIncreaseQuotaPrivilege
  SeLoadDriverPrivilege
  SeManageVolumePrivilege
  SeProfileSingleProcessPrivilege
  SeRemoteShutdownPrivilege
  SeRestorePrivilege
  SeSecurityPrivilege
  SeShutdownPrivilege
  SeSystemEnvironmentPrivilege
  SeSystemProfilePrivilege
  SeSystemtimePrivilege
  SeTakeOwnershipPrivilege
  SeUndockPrivilege

> Do you mean CreateProcessAsUser, or does a subsequent CreateProcess
> fail?

CreateProcessAsUser.  The forked child sshd setuid's and then
CreateProcessAsUser(C:\cygwin\bin\bash.exe,...) fails with windows
error 3.

> I was going to ask if you can give me ssh access on a 2003, but...

Huh, that's pretty difficult in this situation :-P 


Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Developer                                mailto:cygwin@cygwin.com
Red Hat, Inc.