This is the mail archive of the cygwin mailing list for the Cygwin project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

Re: suid bit on executables?


On Tue, 23 Mar 2004, Richard Troy wrote:

> On Tue, 23 Mar 2004, Corinna Vinschen wrote:
> > On Mar 22 19:49, Richard Troy wrote:
> > > A little over a year ago, I poked my nose under the tent to inquire about
> > > this once more and in the interrim there had been a new cygserver and a
> > > new ssh daemon, and I was very happy with the advance, but still things
> > > were short of the SUID bit being honored...
> > >
> > > Now, I read in the archives about something, apparently upcoming, called
> > > cygdaemon... I read hints that cygdaemon helps address this problem.
> >
> > There's no such thing as a cygdaemon, only cygserver.  If the SUID stuff
> > gets implemented, it will be based on cygserver.  But there's no code
> > for doing this so far.  Security changes in 2K3 are making an implementation
> > even more complex.
> >
> > Corinna
>
> Thank you, Corinna.
>
> ...might you please propose a work-around for the following scenario?
>
> If I wanted just one particular program to run as this other user, there's
> that nifty tool in Cygwin that lets you define a service that _can_ run as
> another user. This would work for me if I had a way for a Cygwin program,
> launched from a command-line interface, from Bash, say, to attach to it
> and let it do the dirty work. It would need a way to pass command-line
> arguments, and redirect or share std-in, std-out, and std-error. ...I know
> there's the SSHD code that could serve as an example, but it seems to me
> that it's overkill for what I want since there's no need for it to
> credential itself as anyone. ...The simpler, the better, so long as it's
> sufficient!
>
> Thank you for your suggestions/ideas,
> Richard

Richard,

FYI, Cygwin implements /dev/conin and /dev/conout, so, perhaps, the
approach suggested in <http://cygwin.com/ml/cygwin/2004-03/msg00259.html>
would be helpful (or something along those lines).

OTOH, once cygserver is in place, we'll have a working "su" (which is
exactly what you want, right?).
	Igor
-- 
				http://cs.nyu.edu/~pechtcha/
      |\      _,,,---,,_		pechtcha@cs.nyu.edu
ZZZzz /,`.-'`'    -.  ;-;;,_		igor@watson.ibm.com
     |,4-  ) )-,_. ,\ (  `'-'		Igor Pechtchanski, Ph.D.
    '---''(_/--'  `-'\_) fL	a.k.a JaguaR-R-R-r-r-r-.-.-.  Meow!

"I have since come to realize that being between your mentor and his route
to the bathroom is a major career booster."  -- Patrick Naughton

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]