exec after seteuid

Corinna Vinschen cygwin-patches@cygwin.com
Mon Jun 9 18:18:00 GMT 2003

On Mon, Jun 09, 2003 at 01:15:32PM -0400, Pierre A. Humblet wrote:
> Corinna Vinschen wrote:
> > 
> > On Mon, Jun 09, 2003 at 12:43:13PM -0400, Pierre A. Humblet wrote:
> > > Corinna Vinschen wrote:
> > > > it changes the impersonated access token if priv_gid is in the group
> > > > list of the new users token.
> > >
> > > Nope. The token is only changed by set(e)uid(), never by set(e)gid().
> > > Set(e)gid only changes the default group in the token, not the token
> > > itself (that's your design, or perhaps even older, and it's just fine).
> > 
> > There's SetTokenInformation(TokenPrimaryGroup) called in setegid32.
> Yes, but it's a misleading name. It only affects the (default) group of
> files created by Windows programs launched by Cygwin.
> Also, starting with Win2000, such a call will fail in the case when the
> group given as argument is not in the token groups.

I must admit that I can't reproduce the situation.  A few hours ago I
had the case that the final setuid created a new passwordless token,
using your login code!  Now that I'm testing again, it doesn't occur.
I hate when something like this happens :-(


Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Developer                                mailto:cygwin@cygwin.com
Red Hat, Inc.

More information about the Cygwin-patches mailing list