Re: Help with sgid into the Administrators group (or alternatives?)
- Date: Fri, 8 Jun 2018 09:34:51 -0400
- From: Sam Habiel <sam.habiel@xxxxxxxxx>
- Subject: Re: Help with sgid into the Administrators group (or alternatives?)
I installed the LSA authentication package; but no difference in
behavior was found.
On Wed, Jun 6, 2018 at 9:20 AM, Sam Habiel <sam.habiel@xxxxxxxxx> wrote:
> I am continuing to port GT.M to Cygwin
> The database has a suid program that is marked u+s (root suid) on the
> file permissions so that it can run as root whenever invoked. One of
> the first things it does is cd to another directory that is owned by
> root and is not accessible by anybody else.
> Cygwin doesn't have the concept of root; so I am trying to implement
> this by sgid into the Adminstrators group (544) from a limited user
> account (i.e., set-up that way on Windows). The executable, instead of
> being suid root, is sgid Adminstrators. The sgid C call apparently
> succeeds when I run it from gdb, but the C chdir instruction fails.
> I read https://cygwin.com/cygwin-ug-net/ntsec.html; but haven't done
> anything it says. After all, the sgid call apparently succeeded.
> My question is: am I on the right path; or is Windows and Cygwin being
> reasonable in denying my request to chdir when the user is not a
> member of the Administrators group, in spite of the executable being
> sgid Administrators?
Problem reports: http://cygwin.com/problems.html
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple