[Patch] Allow to disable root privileges with CYGWIN=noroot

[Corinna Vinschen]

On Oct 13 22:31, Christian Franke wrote:
> Corinna Vinschen wrote:
>> Patch checked in.
>>   
>
> Thanks.
>
>> Thanks for doing this.  Would you have fun to provide a tool for the
>> net distro which uses this feature?
>>
>>   
>
> A first try is attached.
>
> cygdrop command ... -- Drop admin group and most privileges and run command.
> cygdrop -b command ... -- same, but keep SeBackupPrivilege (~ R/O admin :-)

Cool.  Another interesting option could be to remove the domain admins
group as well, if the user is a domain user and, of course, removing
any single user right, similar to the "capsh" tool under SELinux.

I'm just not sure if that tool should be part of the Cygwin package or
a package of its own right.  I'm leaning towards the latter choice.


Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Project Co-Leader          cygwin AT cygwin DOT com
Red Hat