Re: setreuid

[Baurjan Ismagulov <ibr at ata dot cs dot hun dot edu dot tr>]

On Thu, Oct 16, 2003 at 13:19:29, Corinna Vinschen wrote:
> No, that's not right.  The German term for "increase quotas" is
> "Anpassen von Speicherkontingenten fuer einen Prozess" (at least on
> 2003 Server).  "Erstellen eines Tokenobjekts" is German for "Create
> a token object".

Hmmm, the document you pointed to mentions "act as part of the operating
system", "replace process level token" and "increase quotas". Now I have
the following privileges granted:

Einsetzen als Teil des Betriebssystems                 ZAISAN\ibr
Ersetzen eines Tokens auf Prozessebene                 ZAISAN\ibr
Anpassen von Speicherkontingenten für einen Prozess    Administratoren
Erstellen eines Tokenobjekts                           -

ibr is a member of Administratoren.

Logout, login, tftpd. The result is: setreuid(1012, 1012) = -1 EPERM.
This works if I grant "Erstellen eines Tokenobjekts" to ZAISAN\ibr. What
is going on?

With kind regards,
Baurjan.

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/