This is the mail archive of the cygwin mailing list for the Cygwin project.

Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

Re: winln for native symlinks

On 4/4/2013 11:48 AM, Thomas Wolff wrote:
> It shows this error message:
> winln: you don't permission to create symbolic links. Run, as
> administrator,
> winln:   editrights -a SeCreateSymbolicLinkPrivilege -a $YOUR_USER
> which should be fixed somehow like this:
> You don't have permission to create symbolic links. Run, as administrator,
>         editrights -a SeCreateSymbolicLinkPrivilege -u $USER
> Moreover, this advice does not help. Even after having issued this
> command as administrator, winln -s still works as administrator only.

The SeCreateSymbolicLinkPrivilege privilege is filtered by User Account
Control (UAC).  If your account is a member of the "Administrators"
group, then the process needs to be run with your elevated credentials
in order to make use of the SeCreateSymbolicLinkPrivilege privilege.

The "Administrator" account always runs in an elevated state and
accounts that are not members of the "Administrators" group do not have
their security tokens filtered by UAC.

Does Cygwin permit binaries to be built with manifests?  If so,
winln.exe could include an embedded manifest that indicates that
elevated status is required.  The user would then be prompted by UAC
whenever the command is used.

Jeffrey Altman

Problem reports:
Unsubscribe info:

Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]