Hi Magnus,
Magnus Wrote:
> I'd be interested in seeing the output from the command:
> Subinacl /service NULL
>
> On a system where this does not work.
>
Here is the output for "Subinacl /service NULL"
Both, for the Administrator user and for the Postgres user:
Postgres user:
>Subinacl /service NULL
SeSecurityPrivilege : Access is denied.
WARNING :Unable to set SeSecurityPrivilege privilege. This privilege may be required.
Error OpenSCManager : Access is denied.
Elapsed Time: 00 00:00:00
Done: 0, Modified 0, Failed 0, Syntax errors 0
----------------------------------------------------------------------------------
Administrator user:
==============
+Service NULL
==============
/control=0x0
/owner =system
/primary group =system
/audit ace count =1
/aace =everyone SYSTEM_AUDIT_ACE_TYPE-0x2
FAILED_ACCESS_ACE_FLAG-0x80 FAILED_ACCESS_ACE_FLAG-0x0x80
SERVICE_ALL_ACCESS
/perm. ace count =6
/pace =system ACCESS_ALLOWED_ACE_TYPE-0x0
SERVICE_QUERY_CONFIG-0x1 SERVICE_QUERY_STATUS-0x4 SERVICE_ENUMERATE_DEPEND-0x8
SERVICE_START-0x10 SERVICE_STOP-0x20 SERVICE_PAUSE_CONTINUE-0x40
_INTERROGATE-0x80
READ_CONTROL-0x20000 SERVICE_USER_DEFINED_CONTROL-0x0100
/pace =builtin\administrators ACCESS_ALLOWED_ACE_TYPE-0x0
SERVICE_ALL_ACCESS
/pace =interactive ACCESS_ALLOWED_ACE_TYPE-0x0
SERVICE_QUERY_CONFIG-0x1 SERVICE_QUERY_STATUS-0x4 SERVICE_ENUMERATE_DEPEND-0x8
SERVICE_INTERROGATE-0x80 READ_CONTROL-0x20000 SERVICE_USER_DEFINED_CONTROL-0x0100
/pace =service ACCESS_ALLOWED_ACE_TYPE-0x0
SERVICE_QUERY_CONFIG-0x1 SERVICE_QUERY_STATUS-0x4 SERVICE_ENUMERATE_DEPEND-0x8
SERVICE_INTERROGATE-0x80 READ_CONTROL-0x20000 SERVICE_USER_DEFINED_CONTROL-0x0100
/pace =authenticated users ACCESS_ALLOWED_ACE_TYPE-0x0
SERVICE_USER_DEFINED_CONTROL-0x0100
/pace =builtin\power users ACCESS_ALLOWED_ACE_TYPE-0x0
SERVICE_QUERY_CONFIG-0x1 SERVICE_QUERY_STATUS-0x4 SERVICE_ENUMERATE_DEPEND-0x8
SERVICE_START-0x10 SERVICE_STOP-0x20 SERVICE_PAUSE_CONTINUE-0x40
_INTERROGATE-0x80
READ_CONTROL-0x20000 SERVICE_USER_DEFINED_CONTROL-0x0100
Elapsed Time: 00 00:00:00
Done: 1, Modified 0, Failed 0, Syntax errors 0
Last Done : NULL
----------------------------------------------------------------------------------------------------
As you can see it failed to set SeSecurityPrivilege privilege for the Postgres user.
Regards
Dror;
> Subject: Re: [HACKERS] Bug with initDB under windows 2003
> Date: Fri, 18 Aug 2006 14:33:58 +0200
> From: [EMAIL PROTECTED]
> To: [EMAIL PROTECTED]; kleptog@svana.org; [EMAIL PROTECTED]
> CC: pgsql-hackers@postgresql.org
>
> > > Have you been able to determine *why* Microsoft made this
> > braindead
> > > decision? Or where it's documented? Their own knowledgebase is
> > filled
> > > with examples of using the device, so I imagine they'll have to
> > post a
> > > workaround somewhere...
> >
> > AFAIK, nobody has posted any links to information that shows that
> > Microsoft actually *did* change this. I've searched their KB some
> > (including the partner-only one for people with the paid
> > agreements, which contains information about bugs that they don't
> > want to be public), and find nothing about it.
> >
> > Unless you can reproduce this on a clean system, I'm definitely
> > inclined to say this is caused by some other piece of software on
> > the machine - firewall, antivirus, antispyware or virus/spyware
> > itself.
>
> Actually, I've been able to find some more information about this, which
> confirms that the problem is access rights on the NUL device, but it's
> *NOT* set by a MS security patch.
>
> I'd be interested in seeing the output from the command:
> Subinacl /service NULL
>
> On a system where this does not work.
>
> (If you get an empty update, make sure you have a version of subinacl
> that corresponds to your windows version)
>
> (There are known apps that mess this up, but my NDA prevents me from
> telling you which one(s)...)
>
> //Magnus
>
>
> ---------------------------(end of broadcast)---------------------------
> TIP 4: Have you searched our list archives?
>
> http://archives.postgresql.org
Be one of the first to try Windows Live Mail. Windows Live Mail.
- Re: [HACKERS] Bug with initDB under windows 2003 dror
