Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Reply-To: Cygwin List <cygwin AT cygwin DOT com>
Message-Id: <6.2.1.2.0.20050608225206.07171260@pop.prospeed.net>
Date: Wed, 08 Jun 2005 22:57:17 -0400
To: Brian Keener <bkeenerReMoVeAnTiSpAm AT thesoftwaresource DOT com>,
   cygwin AT cygwin DOT com
From: Larry Hall <lh-no-personal-replies-please AT cygwin DOT com>
Subject: Re: Login & Something diff since cygwin 1.5.15-1 release -   could it be security changes that were made
In-Reply-To: <VA.000011b4.0096adb5@thesoftwaresource.com>
References: <VA DOT 000011ab DOT 0053f8b1 AT thesoftwaresource DOT com>  <20050606104023 DOT GG3268 AT calimero DOT vinschen DOT de>  <VA DOT 000011af DOT 013e5ade AT thesoftwaresource DOT com>  <20050607090035 DOT GB23172 AT calimero DOT vinschen DOT de>  <VA DOT 000011b0 DOT 011613de AT thesoftwaresource DOT com>  <20050608102442 DOT GO23172 AT calimero DOT vinschen DOT de>  <VA DOT 000011b4 DOT 0096adb5 AT thesoftwaresource DOT com>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"

At 02:11 PM 6/8/2005, you wrote:
>Corinna Vinschen wrote:
>> According to my tests you must have given the "Act as part of the operating 
>> system" privilege (SeTcbPrivilege) to your account.  Only when I added this 
>
>Funnny you mention that - after I sent the log(s) yesterday I was thinking 
>about it and kept thinking in the back of my mind that way back when I had 
>changed some windows security setting like that but couldn't remember what it 
>was or why I changed it.  Ring a bell with you why it would be changed - Was 
>that something to do with the previous operation of ntsec or something or would 
>the setting even been something to do with the operation of cygwin?  Could it 
>be some other application that required it - can't recall.


That would be one of the permissions you would add to an account if you 
wanted to use it as the user to run a service.  The others would be:

"Replace process level token"
"Increase quotas"
"Logon as a service"

Perhaps you added one or more of these one time when you wanted to try 
this with your account and didn't remove them all later.  There's really
no need to keep this privilege as far as Cygwin is concerned otherwise.


--
Larry Hall                              http://www.rfk.com
RFK Partners, Inc.                      (508) 893-9779 - RFK Office
838 Washington Street                   (508) 893-9889 - FAX
Holliston, MA 01746                     


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/