Corinna or Pierre please comment? [jason@tishler.net: Re: setuid

Corinna Vinschen cygwin-patches@cygwin.com
Tue Jul 23 08:07:00 GMT 2002


On Tue, Jul 23, 2002 at 10:53:47AM -0400, Pierre A. Humblet wrote:
> True, there is a way...
> I found the mail thread. It's weird that apparently he can get
> mkpasswd to work. NetUserEnum in mkpasswd SHOULD fail for the same reason
> that NetUserGetGroups is failing in get_user_groups.
> Ah, but with -d -u mkpasswd uses NetUserGetInfo, not NetUserEnum. 
> Still, it SHOULD fail too.

But it's not the same situation.  When calling mkpasswd he's
logged in as authenticated user.  When NetUserGetGroups() is called,
it's called from an account which is unknown to the domain (SYSTEM)
and so is treated as anonymous... at least it's as I understand the
situation.

Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Developer                                mailto:cygwin@cygwin.com
Red Hat, Inc.



More information about the Cygwin-patches mailing list