Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Delivered-To: mailing list cygwin@cygwin.com Subject: Security Issue with Cygwin Date: Wed, 22 Jan 2003 18:48:25 -0600 Message-ID: <5D031EBC03123A4AB69FDC7FD99ACCFC13BF@exchange.darwinsdomain.com> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" X-MS-Has-Attach: X-MS-TNEF-Correlator: From: "Lambeth Darwin" To: content-class: urn:content-classes:message X-MimeOLE: Produced By Microsoft Exchange V6.0.5762.3 Cc: Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by delorie.com id h0N0oKf22404 To whom it may concern; Not sure if you know this or not, but the default configuration with Cygwin allows any user to change to any directory on a W2K box and delete whatever files they want. I have installed it with the current default instructions and was able to logon as a regular domain user and cd to c: and delete or add files. That is a major issue. Let me know if there is something I missed. Thank Darwin L. Lambeth dlambeth@darwinsdomain.com -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Bug reporting: http://cygwin.com/bugs.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/