[PATCH] Cygwin: rel 3.0 drops requirement for privileged non-SYSTEM account

David Newall openssh at davidnewall.com
Sun Feb 17 15:17:02 AEDT 2019


On 16/2/19 11:51 pm, Corinna Vinschen wrote:
> Seteuid now creates user token using S4U.  We don't create a token
> from scratch anymore, so we don't need the "Create a process token"
> privilege.  The service can run under SYSTEM again.

It seems like your patch breaks OpenSSH on Windows Vista, Server 2003, 
and possibly others.  I oppose changes that needlessly break systems.



More information about the openssh-unix-dev mailing list