DMARC-Filter: OpenDMARC Filter v1.3.2 sourceware.org 36EB23858022
Subject: Re: sendmail/setuid
To: cygwin@cygwin.com
References: <87h7ob312r.wl-tomas@basun.net>
From: Brian Inglis <Brian.Inglis@SystematicSw.ab.ca>
Organization: Systematic Software
Message-ID: <d657663f-d91e-3465-5feb-2ce966d18d01@SystematicSw.ab.ca>
Date: Thu, 24 Dec 2020 12:12:17 -0700
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101
 Thunderbird/78.6.0
MIME-Version: 1.0
In-Reply-To: <87h7ob312r.wl-tomas@basun.net>
Content-Language: en-CA
Precedence: list
Reply-To: cygwin@cygwin.com
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="us-ascii"; Format="flowed"
Errors-To: cygwin-bounces@cygwin.com
Sender: "Cygwin" <cygwin-bounces@cygwin.com>

On 2020-12-24 04:17, Tomas By wrote:
> I'm using the Cygwin Sendmail (8.14), and am getting this in the log
> file of a program that is supposed to send an email.
> 
> | 451 4.0.0 drop_privileges: setuid(18) failed: Operation not permitted
> | RSET
> | 250 2.0.0 Reset state
> 
> Does this come from Cygwin? It would be odd if it is from the program.
> 
> There is no user 18. The Windows user id's (I think) are 500, 501,
> 1000, 1002, 1003.

$ getent passwd 18
SYSTEM:*:18:18:U-NT AUTHORITY\SYSTEM,S-1-5-18:/home/SYSTEM:/bin/bash

> What is the simplest solution?
> 
> I had it working before I reinstalled, but I tried many things, most
> of which I do not want to repeat.
Process or program may need to be run elevated with admin privileges, or 
configured to not require them if that is even possible.
The easiest way to do that I have found is to create a Windows task to run 
elevated (with highest privileges) under user SYSTEM and run a shell invoking a 
shell script.
The task may then start up Cygwin services to run elevated under user SYSTEM or 
however each is configured.

-- 
Take care. Thanks, Brian Inglis, Calgary, Alberta, Canada

This email may be disturbing to some readers as it contains
too much technical detail. Reader discretion is advised.
[Data in binary units and prefixes, physical quantities in SI.]
--
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple