Re: admin privileges when logging in by ssh?

2011-10-17 Thread Andrew Schulman
I applied a patch to CVS which should solve this problem in a generic way. I observed how Windows handles the privileges when creating a token and your scenario should be nicely covered now. Confirmed: with with 2011-10-15 snapshot, all of my privileges are enabled now when I log in with

Re: admin privileges when logging in by ssh?

2011-10-16 Thread Henry S. Thompson
Corinna Vinschen writes: . . . By simply trying them out, I created a list of the privileges which trigger the high integrity level requirement. See, for instance, http://sourceware.org/cgi-bin/cvsweb.cgi/src/winsup/cygwin/sec_helper.cc.diff?r1=1.93r2=1.94cvsroot=srcf=h For the security

Re: admin privileges when logging in by ssh?

2011-10-15 Thread Corinna Vinschen
On Oct 14 21:14, Corinna Vinschen wrote: On Oct 14 20:23, Corinna Vinschen wrote: On Oct 14 11:18, Andrew Schulman wrote: So the difference AFAICT is the membership in the Administrators group. Notice also in the two listings below, that by password authentication, backup gets

Re: admin privileges when logging in by ssh?

2011-10-15 Thread Andrew Schulman
On Oct 14 21:14, Corinna Vinschen wrote: On Oct 14 20:23, Corinna Vinschen wrote: On Oct 14 11:18, Andrew Schulman wrote: So the difference AFAICT is the membership in the Administrators group. Notice also in the two listings below, that by password authentication, backup gets

Re: admin privileges when logging in by ssh?

2011-10-15 Thread Corinna Vinschen
On Oct 15 13:32, Andrew Schulman wrote: On Oct 14 21:14, Corinna Vinschen wrote: I applied a patch to CVS which should solve this problem in a generic way. I observed how Windows handles the privileges when creating a token and your scenario should be nicely covered now. I also dropped a

Re: admin privileges when logging in by ssh?

2011-10-14 Thread Andrew Schulman
Does Windows 7 Home Premium come with a native whoami? Yes, it does. So here's what I've found. I have two users, who get different results. (1) User admin is a member of the Administrators group. He gets the expected results: whether he logs in by password or pubkey authentication, he can

Re: admin privileges when logging in by ssh?

2011-10-14 Thread Corinna Vinschen
On Oct 14 11:18, Andrew Schulman wrote: When user backup logs in by ssh, he gets different results: * If he logs in by password authentication, then whoami /all shows the right user name and privileges, and he can use the privileges. See Listing 1 below. So this is fine. * If he

Re: admin privileges when logging in by ssh?

2011-10-14 Thread Corinna Vinschen
On Oct 14 20:23, Corinna Vinschen wrote: On Oct 14 11:18, Andrew Schulman wrote: So the difference AFAICT is the membership in the Administrators group. Notice also in the two listings below, that by password authentication, backup gets Mandatory Label\High Mandatory Level while

Re: admin privileges when logging in by ssh?

2011-10-04 Thread Corinna Vinschen
On Sep 12 10:24, Andrew Schulman wrote: When a user with administrative privileges logs in to sshd, it seems that the user is only granted standard user privileges for that session. Is there a way around that? How can I get the admin privileges for that session? Winding this up:

Re: admin privileges when logging in by ssh?

2011-10-04 Thread Andrew Schulman
On Sep 12 10:24, Andrew Schulman wrote: When a user with administrative privileges logs in to sshd, it seems that the user is only granted standard user privileges for that session. Is there a way around that? How can I get the admin privileges for that session? Winding

Re: admin privileges when logging in by ssh?

2011-10-04 Thread Corinna Vinschen
On Oct 4 11:59, Andrew Schulman wrote: On Sep 12 10:24, Andrew Schulman wrote: When a user with administrative privileges logs in to sshd, it seems that the user is only granted standard user privileges for that session. Is there a way around that? How can I get the admin

Re: admin privileges when logging in by ssh?

2011-09-12 Thread Andrew Schulman
When a user with administrative privileges logs in to sshd, it seems that the user is only granted standard user privileges for that session. Is there a way around that? How can I get the admin privileges for that session? Winding this up: Password authentication to sshd is all that's

admin privileges when logging in by ssh?

2011-09-11 Thread Andrew Schulman
When a user with administrative privileges logs in to sshd, it seems that the user is only granted standard user privileges for that session. Is there a way around that? How can I get the admin privileges for that session? Cygwin 1.7.9, Windows 7 Home Premium. I've created a user account in

Re: admin privileges when logging in by ssh?

2011-09-11 Thread Andrew Schulman
When a user with administrative privileges logs in to sshd, it seems that the user is only granted standard user privileges for that session. Is there a way around that? How can I get the admin privileges for that session? Nevermind. I found the answer from Corinna way back in 2004:

Re: admin privileges when logging in by ssh?

2011-09-11 Thread Andrew Schulman
When a user with administrative privileges logs in to sshd, it seems that the user is only granted standard user privileges for that session. Is there a way around that? How can I get the admin privileges for that session? Nevermind. I found the answer from Corinna way back in

Re: admin privileges when logging in by ssh?

2011-09-11 Thread Eliot Moss
On 9/11/2011 9:07 PM, Andrew Schulman wrote: When a user with administrative privileges logs in to sshd, it seems that the user is only granted standard user privileges for that session. Is there a way around that? How can I get the admin privileges for that session? Nevermind. I found

FW: admin privileges when logging in by ssh?

2011-09-11 Thread Karl M
Date: Sun, 11 Sep 2011 21:59:23 -0400 From: moss To: cygwin Subject: Re: admin privileges when logging in by ssh? On 9/11/2011 9:07 PM, Andrew Schulman wrote: When a user with administrative privileges logs in to sshd, it seems that the user is only granted standard user privileges