[PATCH] Cygwin: rel 3.0 drops requirement for privileged non-SYSTEM account

Corinna Vinschen vinschen at redhat.com
Sun Feb 17 20:02:52 AEDT 2019


On Feb 17 14:47, David Newall wrote:
> On 16/2/19 11:51 pm, Corinna Vinschen wrote:
> > Seteuid now creates user token using S4U.  We don't create a token
> > from scratch anymore, so we don't need the "Create a process token"
> > privilege.  The service can run under SYSTEM again.
> 
> It seems like your patch breaks OpenSSH on Windows Vista, Server 2003, and
> possibly others.  I oppose changes that needlessly break systems.

- Windows 2003 isn't supported by Cygwin anymore

- S4U has been introduced with Windows 2003

- Vista is newer than Windows 2003


Corinna

-- 
Corinna Vinschen
Cygwin Maintainer
Red Hat
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20190217/891b1d90/attachment.asc>


More information about the openssh-unix-dev mailing list