DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org 3B3063858D1E
Date: Thu, 22 Dec 2022 20:45:00 +0900
To: cygwin@cygwin.com
Cc: Christopher Ng <facboy@gmail.com>
Subject: Re: Windows file security
Message-Id: <20221222204500.5eb10d63b00bea87d1769b34@nifty.ne.jp>
In-Reply-To: <CAN5wt5pwK=6rkxZiZbku_50LAa20eHfVrQsgsb8WE4JbS7tJfw@mail.gmail.com>
References: <CAN5wt5pwK=6rkxZiZbku_50LAa20eHfVrQsgsb8WE4JbS7tJfw@mail.gmail.com>
Mime-Version: 1.0
Precedence: list
From: Takashi Yano via Cygwin <cygwin@cygwin.com>
Reply-To: Takashi Yano <takashi.yano@nifty.ne.jp>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: cygwin-bounces+archive-cygwin=delorie.com@cygwin.com
Sender: "Cygwin" <cygwin-bounces+archive-cygwin=delorie.com@cygwin.com>

On Thu, 22 Dec 2022 11:26:08 +0000
Christopher Ng wrote:
> hi,
> 
> is it possible to secure the files of the cygwin installation?  i
> notice that at the 'regular' cygwin prompt i can write to any
> directory, and modify anything.  isn't this somewhat insecure if eg
> i'm running cygwin as an ssh server, but any process running as me can
> go and modify sshd?
> 
> how does one make files non-writable by normal users?

1) Remove Administrators rights from normal users.
2) Enable Administrator account.
3) Install cygwin using Administrator account.

Then the cygwin system files will not be writable
by normal users.

-- 
Takashi Yano <takashi.yano@nifty.ne.jp>

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple