Re: [ANNOUNCEMENT] New release of setup.exe (2.249.2.10)

2003-03-17 Thread Pierre A. Humblet
On Mon, Mar 17, 2003 at 08:35:34AM +0100, Markus Schönhaber wrote: OK, I should be able to get that done. OK, thanks Markus. The results of this test will not be influenced by the flavour of the existing cygwin installation (who did it, what was installed etc.)? Yes, it will depend on who

Re: [ANNOUNCEMENT] New release of setup.exe (2.249.2.10)

2003-03-17 Thread Pierre A. Humblet
On Mon, Mar 17, 2003 at 11:27:13PM +0100, Markus Schönhaber wrote: I hope this will help. Cool, setup handles ntsec very well everywhere you have tried. The only problem so far is that of a non-privileged domain user answering Yes to the Run As pop up. He won't be included in /etc/passwd. I

Re: [ANNOUNCEMENT] New release of setup.exe (2.249.2.10)

2003-03-17 Thread Pierre A. Humblet
On Tue, Mar 18, 2003 at 12:44:12AM +0100, Markus Schönhaber wrote: Same machine as last time (same machine as every time, James). I assume it's not the same as the very first time, when you wrote Most files seem to have no permission for others. previous setup deleted, registry keys

Re: Home directories and spaces

2003-03-16 Thread Pierre A. Humblet
On Sun, Mar 16, 2003 at 11:23:47AM -, Max Bowsher wrote: Tim Largy wrote: What are most people using as their home directories, and from the multitudinous ways of setting it, what is the preferred method? The Cygwin default home dir is /home/username. Did you change it deliberately,

Re: [ANNOUNCEMENT] New release of setup.exe (2.249.2.10)

2003-03-15 Thread Pierre A. Humblet
On Sat, Mar 15, 2003 at 03:30:03AM -0800, Doug VanLeuven wrote: I wish I had just one domain. To set this up in a mutidomain environment, I'm finding I install as an administrator of one of the domains DOMAIN1 create local passwd group files passwd.local group.local create domain

Re: [ANNOUNCEMENT] New release of setup.exe (2.249.2.10)

2003-03-15 Thread Pierre A. Humblet
On Sat, Mar 15, 2003 at 11:17:53AM +0100, Markus Schönhaber wrote: I just started setup under a non-privileged account and XP's mechanism to show the Run as Administrator dialog when starting a program called setup.exe or install.exe kicked in. I have done some more research now but it

Re: [ANNOUNCEMENT] New release of setup.exe (2.249.2.10)

2003-03-14 Thread Pierre A. Humblet
Markus Schönhaber wrote: The way setup behaved is exactly the way I expected it to and the way I would consider right. But you seem to consider this a problem. Obviously I did miss the point here - maybe we are talking about different things. It's not about the Select Root Install Directory

Re: [ANNOUNCEMENT] New release of setup.exe (2.249.2.10)

2003-03-14 Thread Pierre A. Humblet
Markus Schönhaber wrote: Hi Markus, No problem. There are some more boxes waiting to get updated (domain members / standalone workstations). I'll do that next week. Propably then my mirror will carry the most recent files. Here is another point of concern: assume a non privileged domain

Re: [ANNOUNCEMENT] New release of setup.exe (2.249.2.10)

2003-03-14 Thread Pierre A. Humblet
Markus Schönhaber wrote: Pierre A. Humblet wrote: Markus Schönhaber wrote: I just started setup under a non-privileged account and XP's mechanism to show the Run as Administrator dialog when starting a program called setup.exe or install.exe kicked in. Maybe this is what you meant? If so

Re: cygwin and ntsec

2003-03-14 Thread Pierre A. Humblet
On Fri, Mar 14, 2003 at 01:41:15PM -0800, Ling F. Zhang wrote: right after installation of cygwin, the cygwin filesystem is mostly under user Administrators (the user I use is Admin, which is just renaming the default Administrator of Win2k) and group None... This is not supposed to happen

Re: New release of setup.exe (2.249.2.10)

2003-03-13 Thread Pierre A. Humblet
Robert Collins wrote: I'm happy to announce a new release of setup.exe. This version will correctly set permissions for use with the ntsec setting of cygwin, which is the default now. Rob, that's too optimistic. It will *improve* the display of permissions in the majority of cases. More

Re: cygwin-1.3.21-1, problem with sparse file creation as default

2003-03-13 Thread Pierre A. Humblet
On Thu, Mar 13, 2003 at 03:20:10PM -, Max Bowsher wrote: We've had no proof of advantages (except in one very restricted corner case), and no disproof of disadvantages (i.e. speed penalties). Max, Running a speed test would be interesting of course, but I point to an advantage for most

Re: cygwin-1.3.21-1, problem with sparse file creation as default

2003-03-13 Thread Pierre A. Humblet
At 12:36 AM 3/14/2003 -0500, Christopher Faylor wrote: On Thu, Mar 13, 2003 at 09:41:55PM -0500, Pierre A. Humblet wrote: On Thu, Mar 13, 2003 at 03:20:10PM -, Max Bowsher wrote: We've had no proof of advantages (except in one very restricted corner case), and no disproof of disadvantages (i.e

Re: Bug in passwd-grp.sh

2003-03-12 Thread Pierre A. Humblet
On Wed, Mar 12, 2003 at 11:45:21PM -, Max Bowsher wrote: I just completely wiped and reinstalled Cygwin, to test setup-2.249.2.10. Will post further with results. Something rather odd happened - here are the passwd and group files that were created: --- passwd

Re: problems with cygwin after setup

2003-03-12 Thread Pierre A. Humblet
On Tue, Mar 11, 2003 at 01:42:55PM -0600, günter strubinsky wrote: I guess (and it's a WILD guess) it could be the same problem I experience sometimes when installing new components. For unknown reasons the file attributes (authority/permission) are set to 000 (under win2k adv svr)! Guenter,

Re: Bug in passwd-grp.sh

2003-03-12 Thread Pierre A. Humblet
At 02:28 PM 3/13/2003 +1100, Robert Collins wrote: Do we have that new passwd-grp to be uploaded? Yes http://sources.redhat.com/ml/cygwin-apps/2003-02/msg00316.html Pierre -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Bug reporting: http://cygwin.com/bugs.html

Re: fhandler_socket::dup

2003-03-11 Thread Pierre A. Humblet
Corinna Vinschen wrote: I'm seriously concidering to remove all the fixup_before/fixup_after from fhandler_socket::dup() and just call fhandler_base::dup() on NT systems. Corinna, Isn't that just what you do now? Just out of curiosity, why hasn't this always been done? I blindly thought it

Re: fhandler_socket::dup

2003-03-11 Thread Pierre A. Humblet
Corinna Vinschen wrote: Thanks. We still don't know *why* that happens, though. That bugs me. For future reference here is what happens in Jason's experiments. All of them start in the system service environment and do as follows A) [optional] call gethostname to initialize wsock B)

Re: fhandler_socket::dup

2003-03-11 Thread Pierre A. Humblet
in the mail archives around that date. There is no need to include this patch in 1.3.21. I'd like to test it for a longer period. I hope there are others out there still running the cvs version and the snapshots on Win9X. Pierre 2003-03-12 Pierre Humblet [EMAIL PROTECTED] * fhandler_socket.cc

Re: New setup.exe snapshot available.

2003-03-08 Thread Pierre A. Humblet
At 11:23 AM 3/9/2003 +1100, Robert Collins wrote: There is a new setup.exe snapshot. It's a minor increment over the current setup. From an ntsec point of view it tries to insure that the file permissions *displayed* by ls -l allow at least rx access. When running the new snapshot, please be on

utmp

2003-03-07 Thread Pierre A. Humblet
2003-03-07 Pierre Humblet [EMAIL PROTECTED] * tty.cc (create_tty_master): Call GetComputerName instead of cygwin_gethostname. Set ut_id. * syscalls.cc (login): Call endutent. (setutent): Do not seek after a fresh open. Index: tty.cc

Re: Permission denied calling configure on Win95

2003-03-06 Thread Pierre A. Humblet
On Thu, Mar 06, 2003 at 11:50:26AM -0500, Christopher Faylor wrote: On Thu, Mar 06, 2003 at 05:06:23PM +0100, karim Hamed-Abdelouahab wrote: Well, I used setup.exe to download and install all the packages from the cygwin.com web page. ;-) And I found the needed DLL in the same path where is

Re: Finishing large file support?

2003-03-06 Thread Pierre A. Humblet
On Thu, Mar 06, 2003 at 03:15:57PM -0600, Brian Ford wrote: What is left to finish support for large files (2G)? We may be willing to help. Thanks. http://sources.redhat.com/ml/cygwin-developers/2002-05/msg00053.html http://sources.redhat.com/ml/cygwin-developers/2003-01/msg00078.html

Re: bash 'test -x' gives incorrect results with group permissions?

2003-03-05 Thread Pierre A. Humblet
On Wed, Mar 05, 2003 at 04:10:35PM -0500, Eric Tiffany wrote: I encountered a perplexing situation with file permissions. I am running cygwin 1.3.20 and bash 2.05b.0(8). I have an executable with the following permissions: $ ls -ln /c/j2sdk1.4.1_01/bin/java -rwxrwx---+ 1 544

Re: [PATCH] Postinstall script ordering in setup - take 2

2003-03-04 Thread Pierre A. Humblet
At 06:52 PM 3/4/2003 -, Max Bowsher wrote: Do we also need a way to mark 'high-priority' scripts? i.e. ones that should run before all others. I'm thinking about passwd-grp.sh mainly. Good point. Any other script doing a chown would need it, but that's all I can think of (so far). Starting

Re: why is bash trying to access my DNS?

2003-03-03 Thread Pierre A. Humblet
Probably because it tries to get your hostname. At any rate you should see why if you let strace run a little bit more. In previous versions Cygwin was using GetComputerName. Not it uses gethostname, loading wsock. Pierre -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Bug

Re: why is bash trying to access my DNS?

2003-03-03 Thread Pierre A. Humblet
On Mon, Mar 03, 2003 at 03:13:07PM -0800, Randall R Schulz wrote: Geoffrey, Just to connect the dots, does your BASH prompt contain \h or \H? The default PS1 established in /etc/profile and /etc/profile.default contain \h and hence trigger a host name look up per Pierre's message. bash

Re: why is bash trying to access my DNS?

2003-03-03 Thread Pierre A. Humblet
On Mon, Mar 03, 2003 at 07:07:05PM -0800, Geoffrey Hausheer wrote: One more thing, I forgot to ask... On Mon, 03 Mar 2003 18:46:09 -0800, Geoffrey Hausheer said: Thank you, this indeed is the issue, as can be seen from the very next line after the wsock call: 5495150 5519336 [main] bash

Re: Processes are unable to fully discard their controlling terminal

2003-03-02 Thread Pierre A. Humblet
On Sun, Mar 02, 2003 at 12:43:28PM -0500, Christopher Faylor wrote: On Sun, Mar 02, 2003 at 12:33:04PM -0500, Christopher Faylor wrote: On Sun, Mar 02, 2003 at 03:33:56PM -, Max Bowsher wrote: I'm not an expert in the ways of Unix ttys. Can anyone help me understand where the problem

Re: Processes are unable to fully discard their controlling terminal

2003-03-02 Thread Pierre A. Humblet
On Sun, Mar 02, 2003 at 06:50:26PM -0500, Christopher Faylor wrote: On Sun, Mar 02, 2003 at 12:43:28PM -0500, Christopher Faylor wrote: On Sun, Mar 02, 2003 at 12:33:04PM -0500, Christopher Faylor wrote: On Sun, Mar 02, 2003 at 03:33:56PM -, Max Bowsher wrote: Processes that attempt to

Re: Processes are unable to fully discard their controlling terminal

2003-03-02 Thread Pierre A. Humblet
On Sun, Mar 02, 2003 at 09:34:17PM -0500, Christopher Faylor wrote: On Sun, Mar 02, 2003 at 09:15:30PM -0500, Pierre A. Humblet wrote: I've checked in some changes that seem to fix the reported behavior. Does the current snapshot rectify this behavior? Now when I start inetd on WinME a DOS

Re: ntsec patch for setup

2003-02-28 Thread Pierre A. Humblet
Robert Collins wrote: On Fri, 2003-02-28 at 22:44, Pavel Tsekov wrote: Here is the same patch modified to be applied on main.cc from setup-200207 branch. This looks reasonable. Pavel, if you have write access, please commit to the setup-200207 branch, otherwise, Max - if you have time

Re: ntsec patch for setup

2003-02-28 Thread Pierre A. Humblet
Morrison, John wrote: BTW, this script doesn't add any domain users... -c adds the current user, if a domain user. If you are on a domain account at work, please test it, it takes a few seconds. Just did. How does it cope if it can't access the domain? It doesn't even try. It

Re: bash's (built-in) type command can not handle spaces in paths

2003-02-28 Thread Pierre A. Humblet
On Fri, Feb 28, 2003 at 04:42:53PM -0800, Curtis Siemens wrote: By the way, given that I can actually run an executable that bash/type can't find, does this suggest that possibly the builtin type command is doing something wrong? Yes and no. Obviously it isn't working as it should. But in

Re: access () and path.cc

2003-02-27 Thread Pierre A. Humblet
At 11:36 PM 2/27/2003 -0500, you wrote: Pierre, You and Corinna are giving me a headache. :-) My immediate access () problem can be fixed by replacing real_path by fn in the stat_worker call. Problem #1 is a real bug, should be easy to fix, and may not show up anywhere anyway, so not urgent.

Re: access () and path.cc

2003-02-27 Thread Pierre A. Humblet
At 01:10 AM 2/28/2003 -0500, Christopher Faylor wrote: On Fri, Feb 28, 2003 at 01:02:58AM -0500, Pierre A. Humblet wrote: At 12:56 AM 2/28/2003 -0500, you wrote: On Fri, Feb 28, 2003 at 12:49:59AM -0500, Pierre A. Humblet wrote: OK, following Chris' remarks here is a much smaller set of changes

Re: Permission bits

2003-02-27 Thread Pierre A. Humblet
On Thu, Feb 27, 2003 at 09:21:29PM -0500, Christopher Faylor wrote: On Thu, Feb 27, 2003 at 03:23:07PM -0800, Andrew DeFaria wrote: I really wish I understood Windows security and ACLs, etc and how they map or don't map to Cygwin's Posix file permissions but alas I don't. Can somebody

Re: exim 4.12-3 winsock problem (was Re: 1.3.21)

2003-02-26 Thread Pierre A. Humblet
Jason Tishler wrote: Using good old fashioned strings and Andre's suggestion I have isolated the registry keys requiring read access for Everyone (which did not already have it) to the following: 1. HKLM\System\CurrentControlSet\Services\Winsock\Parameters 2.

Re: mkpasswd mkgroup

2003-02-25 Thread Pierre A. Humblet
Corinna Vinschen wrote: What is the impact for setup.exe? In my eyes the change is fine and could be kept this way. OK, that's fine with me too. It wouldn't require any change to setup.exe and *especially* it would'n be good to change mkpasswd and mkgroup for a short period of time

Re: exim 4.12-3 winsock problem (was Re: 1.3.21)

2003-02-25 Thread Pierre A. Humblet
Jason Tishler wrote: Could you run exim -bd -d -c (skip the -q15m for simplicity) and look at the output. If nothing is obvious, send it to me I will compare it with the output of a local run. See attached for a 4.10-2 and 4.12-3 run. Jason 4.10-2: changed uid/gid: running as a

Re: exim 4.12-3 winsock problem (was Re: 1.3.21)

2003-02-25 Thread Pierre A. Humblet
Jason Tishler wrote: Pierre, On Tue, Feb 25, 2003 at 10:02:49AM -0500, Pierre A. Humblet wrote: So I suggest a simple test: edit /etc/passwd and change the gid of the exim user to 545, then run again. The above fixed the problem. I apologize for not being able to figure this out

Re: exim 4.12-3 winsock problem (was Re: 1.3.21)

2003-02-25 Thread Pierre A. Humblet
Jason Tishler wrote: I tried adding a group:mail:r-x ACL to the following: /mnt/c /mnt/c/WINNT /mnt/c/WINNT/system32 /mnt/c/WINNT/system32/drivers /mnt/c/WINNT/system32/drivers/etc /mnt/c/WINNT/system32/drivers/etc/services /mnt/c/WINNT/system32/*.dll

Re: exim 4.12-3 winsock problem (was Re: 1.3.21)

2003-02-25 Thread Pierre A. Humblet
Christopher Faylor wrote: Perhaps this is completely off the wall but I don't recall anyone answering my question about exim and pthreads. Does exim use threads? No. Pierre -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Bug reporting:

Re: exim 4.12-3 winsock problem (was Re: 1.3.21)

2003-02-25 Thread Pierre A. Humblet
Jason Tishler wrote: Another possibility is registry access. Is there a way to insure that Everyone has read access to the whole registry? regedt32 can change permissions. Any particular subtree that I should try? Right, I had forgotten. I am still using regedit. First see if any

Re: exim 4.12-3 winsock problem (was Re: 1.3.21)

2003-02-25 Thread Pierre A. Humblet
Jason Tishler wrote: Bingo! The following key did not have read access for Everyone: HKEY_LOCAL_MACHINE\SYSTEM Great! After granting access, then exim would start up even though its primary group is my mail group and not the Users one. Do you want me further isolate? If so, any

Re: cygstart, mutt or mailcap?

2003-02-25 Thread Pierre A. Humblet
At 11:09 AM 2/24/2003 -0500, Ajay Simha wrote: On Mon Feb 24 10:32:51 2003, Pierre A. Humblet wrote: On Mon, Feb 24, 2003 at 10:24:58AM -0500, Ajay Simha wrote: -rwxrwxrwx1 1040 65535 162 Feb 24 10:10 ~$LS_capability_Questionnaire.doc

mkpasswd mkgroup

2003-02-24 Thread Pierre A. Humblet
, mkpasswd prints both a default line with uid 500, and a line for the current user with a pseudorandom uid. Other users can be added with -u. Cygwin uses the default line for users that do not have an entry. I will update the documentation if you apply this patch. Pierre 2003-02-25 Pierre

Re: cygstart, mutt or mailcap?

2003-02-24 Thread Pierre A. Humblet
On Mon, Feb 24, 2003 at 10:24:58AM -0500, Ajay Simha wrote: -rwxrwxrwx1 1040 65535 162 Feb 24 10:10 ~$LS_capability_Questionnaire.doc ^ I checked the win-nt groups againgst my /etc/group and all the groups seem to be present: This is

Re: cygstart, mutt or mailcap?

2003-02-24 Thread Pierre A. Humblet
On Mon, Feb 24, 2003 at 11:09:50AM -0500, Ajay Simha wrote: On Mon Feb 24 10:32:51 2003, Pierre A. Humblet wrote: On Mon, Feb 24, 2003 at 10:24:58AM -0500, Ajay Simha wrote: -rwxrwxrwx1 1040 65535 162 Feb 24 10:10 ~$LS_capability_Questionnaire.doc

Re: exim 4.12-3 winsock problem (was Re: 1.3.21)

2003-02-24 Thread Pierre A. Humblet
Jason Tishler wrote: Pierre, On Fri, Feb 21, 2003 at 01:22:01PM -0500, Pierre A. Humblet wrote: This reminds me of something similar, possibly last month. Look for exim, services, gerritt In the end it was because exim was running as a special user who didn't have permission

Re: exim 4.12-3 winsock problem (was Re: 1.3.21)

2003-02-24 Thread Pierre A. Humblet
Jason Tishler wrote: Pierre, On Mon, Feb 24, 2003 at 04:06:01PM -0500, Pierre A. Humblet wrote: If you run with -d you will see that exim sheds all supplementary groups. I was just following the README: cygrunsrv -I exim -p /usr/bin/exim -e CYGWIN=ntsec \ -a -bdf

Re: ACLs getting reset after gunzip

2003-02-23 Thread Pierre A. Humblet
On Sun, Feb 23, 2003 at 05:59:30PM -0800, Jonathan Levine wrote: I'm having a problem with cygwin's g(un)zip.exe and NTFS ACLs. Jonathan, Cygwin attempts to emulate Posix. Thus when it creates a file it also creates an ACL with the permissions for the owner, group and other (everyone). It

Re: syslog

2003-02-22 Thread Pierre A. Humblet
At 02:35 PM 2/22/2003 -0500, Christopher Faylor wrote: Applied with one minor change. I shortened Cygwin PID = %u to just PID %u Hmm, I had another look while resolving the conflict and now I wonder fputc ('\n', fp); UnlockFile (fHandle, 0, 0, 1, 0); if (ferror (fp))

sshd fills syslog on Win98

2003-02-22 Thread Pierre A. Humblet
On Win98 sshd fills syslog with error lines such as 2003-02-22 18:33:26 : sshd : PID 213289 : LOG_ERR : error: Failed to disconnect from controlling tty. 2003-02-22 18:33:32 : sshd : PID 771213 : LOG_INFO : syslogin_perform_logout: logout() returned an error * The first seems to

Re: access()

2003-02-21 Thread Pierre A. Humblet
Corinna Vinschen wrote: Applied. Corinna, I am still worried about using !real_path.exists() to determine non existence, as done in several places in Cygwin. That function checks if the file attributes are After some experiments I found out that GetFileAttributes returns FFF on

syslog

2003-02-21 Thread Pierre A. Humblet
2003-02-22 Pierre Humblet [EMAIL PROTECTED] * syslog.cc (syslog): Do not print the Windows pid. Print the Cygwin pid as an unsigned decimal. On Win95 print a timestamp and attempt to lock the file up to four times in 3 ms. Index: syslog.cc

access()

2003-02-20 Thread Pierre A. Humblet
LoadDLLfuncEx vs. LoadDLLfunc. Pierre 2003-02-21 Pierre Humblet [EMAIL PROTECTED] * autoload.cc (AccessCheck): Add. (DuplicateToken): Add. * security.h (check_file_access): Declare. * syscalls.cc (access): Convert path to Windows, check existence

Re: mkpasswd: [5] Access is denied.

2003-02-19 Thread Pierre A. Humblet
On Wed, Feb 19, 2003 at 11:26:35AM -0800, Peter Canning wrote: I am running as a domain user that had administator privileges on my computer. I don't have access to an account that is a domain adminstrator. - Peter Canning At 03:52 PM 2/14/2003, Elfyn McBratney wrote: The

Re: Mkpasswd Documentation Deficit; Mkpasswd -c Working?

2003-02-19 Thread Pierre A. Humblet
On Wed, Feb 19, 2003 at 02:23:17PM -0800, Randall R Schulz wrote: Hi, Pierre's recent suggestion to invoke mkpasswd with the -c option sent me to the documentation to learn what that option does. Neither info nor man document the -c option. Right, it's a very recent feature that has not

Re: Help with exim! Outlook doing SMTP through a local exim sometimes hangs...

2003-02-18 Thread Pierre A. Humblet
At 10:22 PM 2/17/2003 -0500, Chuck Ocheret wrote: So I have exim working fantastically with various user agents. However, I'm having an intermittent problem with Outlook where it hangs while trying to send mail out through exim. I never tried that but Outlook can work with exim. As suggested

Re: Help with exim! Outlook doing SMTP through a local exim sometimes hangs...

2003-02-18 Thread Pierre A. Humblet
At 09:10 AM 2/18/2003 -0500, Pierre A. Humblet wrote: FYI exim supports Microsoft's Secure Password Authentication (SPA) mechanism but it is included in the precompiled version. ^n't -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Bug reporting

grp.cc

2003-02-17 Thread Pierre A. Humblet
Corinna, I believe this will take care of Re: uh oh [[EMAIL PROTECTED]: Re: bash broken with cygwin 1.3.20? - now working with 1.3.20] Pierre 2003-02-17 Pierre Humblet [EMAIL PROTECTED] * grp.cc (internal_getgroups): Handle properly tokens with no groups. Fix bug introduced

Re: Some questions about the nfs source package was: RE: NFS server (final?)

2003-02-14 Thread Pierre A. Humblet
Corinna Vinschen wrote: They are? They aren't. At home I'm using this passwd and group entries: root:*:0:0:,S-1-5-32-544:: root:S-1-5-32-544:0: I think the default should be SYSTEM/18. OTOH, I think it's pretty much ok to use the 544 as default but the script should test then,

Re: Some questions about the nfs source package was: RE: NFS server(final?)

2003-02-14 Thread Pierre A. Humblet
Jason Tishler wrote: Check out the is_admin() function in setup.exe's mount.cc: Sure, it's easy to do using Windows calls. The issue is that Unix has a well defined privileged uid (0) and that's not the case in Cygwin. Exim itself determines if it is privileged by comparing its uid and

unpatching sshd

2003-02-11 Thread Pierre A. Humblet
Corinna, now that setuid works posixly on Win95, sshd can be unpatched. Pierre --- session.c.orig 2003-02-10 10:12:13.0 -0500 +++ session.c 2003-02-10 10:13:08.0 -0500 @@ -1249,9 +1249,6 @@ do_setusercontext(struct passwd *pw) permanently_set_uid(pw);

Re: multi-user file permission problems

2003-02-11 Thread Pierre A. Humblet
On Wed, Feb 12, 2003 at 12:04:07AM -, Max Bowsher wrote: Brian Ford wrote: I strongly vote for Users. Actually, the currently proposed patch decides based on the group membership of the user running setup. But it might be better for this to be a choosable option. It's Users when

Re: ntsec odds and ends

2003-02-08 Thread Pierre A. Humblet
At 03:05 PM 2/6/2003 -, Max Bowsher wrote: + if (myself-uid == UNKNOWN_UID) + strcpy (group_name, run mkpasswd); /* Feedback... */ I've changed that to just mkpasswd. I don't like to introduce group names with spaces in it. And since they are longer than 8 chars, they'd get

Re: sec_acl.cc

2003-02-05 Thread Pierre A. Humblet
At 05:16 PM 2/5/2003 +0100, Corinna Vinschen wrote: ... I've checked your patch in together with a patch from me. It should now be most similar to alloc_sd(). At least I hope so... Yes, that's fine. However one question remains (in setacl and alloc_sd): what good does it do to remove DELETE

Re: sec_acl.cc

2003-02-05 Thread Pierre A. Humblet
At 05:45 PM 2/5/2003 +0100, Corinna Vinschen wrote: But still, it's more correct, isn't it. That's opinion, not fact! It's also relatively convoluted code that does little, or perhaps even nothing! Surprise, surprise. I've just tried to delete a file in Explorer with the DELETE bit unset and

Re: ntsec odds and ends (cygcheck augmentation?)

2003-02-05 Thread Pierre A. Humblet
At 11:48 AM 2/5/2003 -0500, Christopher Faylor wrote: Pierre or Corinna, Have either of you considered adding code to cygcheck to check for more common ntsec problems? At the very least, something along the lines of your username isn't in /etc/passwd seems like it would be worthwhile. Chris, I

Re: sec_acl.cc

2003-02-05 Thread Pierre A. Humblet
At 06:13 PM 2/5/2003 +0100, Corinna Vinschen wrote: When DELETE_CHILD is off on the parent dir, a file with DELETE can be removed, a file w/o DELETE can't. OK, that's what I see with Explorer. However rm will delete it. That's why I don't think ~DELETE is such a good idea, it only affects

Re: ntsec odds and ends (cygcheck augmentation?)

2003-02-05 Thread Pierre A. Humblet
At 05:52 PM 2/5/2003 +0100, Corinna Vinschen wrote: Actually I would prefer that over this extra check, changing the group name to use mkpasswd. I had some hesitations too. For a while I considered changing the user name itself, but that would cause side effects. Changing the group name doesn't

Re: ntsec odds and ends (cygcheck augmentation?)

2003-02-05 Thread Pierre A. Humblet
At 12:31 PM 2/5/2003 -0500, Igor Pechtchanski wrote: Pierre, IMHO, No entry is a better name for such a situation ([ug]id==-1). It could then be documented in the FAQ. Just my 2¢... Igor, That's something else. ls -l print 65535 when the sid cannot be mapped to a uid/gid, which is NEVER the

Re: ntsec odds and ends (cygcheck augmentation?)

2003-02-05 Thread Pierre A. Humblet
At 01:30 PM 2/5/2003 -0500, Christopher Faylor wrote: I think that initial feedback is a *great* idea but if cygcheck can provide some kind of information that would allow diagnosing a problem, that would be useful, too. Maybe it could just dump selected fields from /etc/passwd and /etc/group. I

security.cc

2003-02-04 Thread Pierre A. Humblet
Corinna, This patch defines a new function get_sids_info that greatly reduces the number of passwd/group lookups, compared to the current approach. There are also minor fixes in security.cc Pierre 2003/02/04 Pierre Humblet [EMAIL PROTECTED] * sec_helper.cc (get_sids_info): New

handle leak in internal_getgroups

2003-02-04 Thread Pierre A. Humblet
Corinna, Sorry, I just noticed a handle leak in internal_getgroups (change of 2003/1/17). It only happens when called from the new function in the patch I just sent. It's a two line fix, with a lot of whitespace changes. Pierre 2003/02/04 Pierre Humblet [EMAIL PROTECTED] * grp.cc

base-files-mketc.sh

2003-02-03 Thread Pierre A. Humblet
Having recently installed Cygwin on a new machine, I noticed that the symbolic links to the base files in /etc use Cygwin syntax (/cygdrive/c/). They break when /cygdrive is modified, which is frequently the case on a new install. It would be more robust (and easier and efficient) to use

Re: base-files-mketc.sh

2003-02-03 Thread Pierre A. Humblet
At 11:46 AM 2/3/2003 -0500, Igor Pechtchanski wrote: FYI, base-files-mketc.sh uses the `cygpath -u ...` syntax to get the directory. Yep, I saw that. Thus, if your cygdrive prefix is changed *before* the postinstall scripts run, the script should pick up the correct one. Currently impossible

Re: base-files-mketc.sh

2003-02-03 Thread Pierre A. Humblet
At 12:29 PM 2/3/2003 -0500, Igor Pechtchanski wrote: What else do you think of? Hmm, I'm not sure. You may be right for the moment (on a new install, in any case). However, any postinstall script using the `cygpath -u ...` syntax would have that problem, and who can guarantee that no others

Re: base-files-mketc.sh

2003-02-03 Thread Pierre A. Humblet
I guess it would have been simpler if I had sent the new version directly (tested on WinME) Pierre #!/bin/sh #-- # Create symbolic links from some /etc files to the Windows equivalents #-- FILES=hosts protocols services networks OSNAME=`/bin/uname -s` WINHOME=`/bin/cygpath -w -W`

class cygpsid

2003-02-03 Thread Pierre A. Humblet
Corinna, this patch defines class cygpsid (basically just moving items from cygsid) and optimizes user_groups::clear_supp (). The changes in passwd/group are just type changes from cygsid to cygpsid. Pierre 2003/02/03 Pierre Humblet [EMAIL PROTECTED] * security.h (class cygpsid): New

Re: cygwin 1.3.19-1 file permission out of sync with NTFS on XP?

2003-02-03 Thread Pierre A. Humblet
Mon, Feb 03, 2003 at 11:14:03AM -0800, Andrew Chang wrote: I have a situation in which a cygwin app created a file, chmod it to readonly. then we have a win32 app chomd the same file to writable (0644). In cygiwn 1.3.12, the new write permission would show up in the cygwin ls -l command. In

exim-4.12-3

2003-01-31 Thread Pierre A. Humblet
I have updated exim to use the latest openssl and have also put a temporary workaround for the chown bug. Pierre http://home.attbi.com/~phumblet/exim-4.12-3.tar.bz2 http://home.attbi.com/~phumblet/exim-4.12-3-src.tar.bz2 http://home.attbi.com/~phumblet/setup.hint # Exim-4.12-3 setup.hint

[ANNOUNCEMENT] Updated: exim-4.12-3

2003-01-31 Thread Pierre A. Humblet
I've updated the version of exim to 4.12-3 This version is identical to 4.12-2 but now linked against openssl-0.9.7 It also works around a chown bug when running the queue from the shell. Pierre To update your installation, click on the Install Cygwin now link on the

Updated: exim-4.12-3

2003-01-31 Thread Pierre A. Humblet
I've updated the version of exim to 4.12-3 This version is identical to 4.12-2 but now linked against openssl-0.9.7 It also works around a chown bug when running the queue from the shell. Pierre To update your installation, click on the Install Cygwin now link on the

Re: exim permission problems with cygwin 1.3.19-1

2003-01-29 Thread Pierre A. Humblet
Wolfgang Schnerring wrote: I'm happily using exim-4.10-2 on a Windows 2000 box, but after updating Cygwin to 1.3.19-1, sending queued messages fails with an error message: $ exim -qf 2003-01-26 15:16:06 H9BRLW-ZC-00 Couldn't chown message log /var/spool/exim/msglog//H9BRLW-ZC-00:

Re: Proposing TCM as a cygwin package

2003-01-27 Thread Pierre A. Humblet
Igor Pechtchanski wrote: On Mon, 27 Jan 2003, [ISO-8859-1] Daniel Bößwetter wrote: [snip] Anyone willing to become maintainer of fig2dev? :-) FYI, fig2dev is part of the xfig package. I have that installed. Browsing through my setup.log indicates that the binary package for

Re: NTEA extensions for uid/gid

2003-01-27 Thread Pierre A. Humblet
On Mon, Jan 27, 2003 at 02:30:35PM +0100, Ronald Landheer-Cieslak wrote: In any case, seeing the behaviour of the exec-permission bits, I have a wouldn't it be nice if...: wouldn't it be nice if the executable permission bits would actually correspond to the executability of a file? I mean,

Re: NTEA extensions for uid/gid

2003-01-23 Thread Pierre A. Humblet
On Wed, Jan 22, 2003 at 11:23:28PM +0100, Christian Mueller wrote: I don't want to use ntsec because I use my Cygwin home directory for Cygwin *and* Windows programs and ntsec displays screwed-up file permissions for files created by Windows programs. The next version of Cygwin changes the

Re: etc_changed, passwd group

2003-01-21 Thread Pierre A. Humblet
Christopher Faylor wrote: Also, implying that there is a one-to-one correspondence between my ChangeLog entries and the ones for your patches is a little simplistic. It would be, but I never compared them. I only remarked that this became one of your largest recent projects (in terms of

Re: Races in group/passwd code (was Re: etc_changed, passwd group)

2003-01-21 Thread Pierre A. Humblet
Christopher Faylor wrote: After consolidating all of the lock code into a refresh method, I realized that there are some pretty big races in the group/passwd code. You can't just protect the reading of the buffers against multiple access, you have to protect all operations which manipulate

Re: ntsec patch for setup

2003-01-20 Thread Pierre A. Humblet
At 10:24 PM 1/19/2003 -, Max Bowsher wrote: I'd suggest something like this: if (isusers) { nsid = usid; log(LOG_TIMESTAMP) Changing gid to Users endLog; } else if (isadmins) nsid = asid; log(LOG_TIMESTAMP) Changing gid to Administrators endLog; } OK, I will wait for

Re: etc_changed, passwd group

2003-01-20 Thread Pierre A. Humblet
edits do trigger it. 2003/01/20 Pierre Humblet [EMAIL PROTECTED] * pwdgrp.h (pwdgrp::isinitializing): Do not change the state when it is uninitialized. * uinfo.cc (pwdfrp::load): Only call etc::init when the state is uninitialized. * path.h: (class etc

Re: ntsec patch for setup

2003-01-19 Thread Pierre A. Humblet
At 06:25 PM 1/19/2003 -, Max Bowsher wrote: Pierre A. Humblet wrote: It would probably be nice to add some logging to the success case, so its easier to see that it has actually taken effect. OK. Good idea. I don't mind doing it but you know better what formats to use etc.. to fit

Re: etc_changed, passwd group

2003-01-18 Thread Pierre A. Humblet
At 12:03 AM 1/18/2003 -0500, Pierre A. Humblet wrote: Chris, An ugly tought came to my mind while doing the dishes: there is a race condition left. Chris, I am going to address this in about an hour, assuming you are not working on it. Otherwise please let me know. Pierre

Re: etc_changed, passwd group

2003-01-18 Thread Pierre A. Humblet
OK, forget what I just wrote, it won't work because the state is reset to initializing. But the idea of calling init just once without +/- 1 has potential. Perhaps by adding a 4th state value: (uninitialized, initializing, reinitializing, loaded). Pierre

Re: etc_changed, passwd group.

2003-01-17 Thread Pierre A. Humblet
On Thu, Jan 16, 2003 at 02:07:18PM -0500, Christopher Faylor wrote: On Thu, Jan 16, 2003 at 01:57:21AM -0500, Pierre A. Humblet wrote: Here is the code as it stands. It compiles runs, and passes fork tests correctly. Feel free to takeover or at least have a look. I will continue testing

Re: etc_changed, passwd group

2003-01-17 Thread Pierre A. Humblet
AFAIK. Users seem quite willing to restart their daemons after editing passwd. If only Novell users (with /etc on a share drive) need to do it now, that will already be a big improvement. 2003/01/17 Pierre Humblet [EMAIL PROTECTED] * pwdgrp.h (class etc): Remove members fn

Re: etc_changed, passwd group

2003-01-17 Thread Pierre A. Humblet
Chris, An ugly tought came to my mind while doing the dishes: there is a race condition left. FindFirstChangeNotification must be called from init, otherwise in the normal case it will be called after the load, leaving a window where the file can be updated without being noticed. Similarly in

Re: setuid on Win95 and etc_changed, passwd group.

2003-01-15 Thread Pierre A. Humblet
Christopher Faylor wrote: During testing I noticed another issue. If etc_changed is initialized in a parent and /etc/passwd is changed between the moments where a child is forked and where etc_changed is first called in the child, etc_changed unexpectedly returns false in the child (WinME).

<    4   5   6   7   8   9   10   11   >