[Patch] Allow to disable root privileges with CYGWIN=noroot

Corinna Vinschen corinna-cygwin@cygwin.com
Wed Oct 14 10:40:00 GMT 2009

On Oct 13 22:31, Christian Franke wrote:
> Corinna Vinschen wrote:
>> Patch checked in.
> Thanks.
>> Thanks for doing this.  Would you have fun to provide a tool for the
>> net distro which uses this feature?
> A first try is attached.
> cygdrop command ... -- Drop admin group and most privileges and run command.
> cygdrop -b command ... -- same, but keep SeBackupPrivilege (~ R/O admin :-)

Cool.  Another interesting option could be to remove the domain admins
group as well, if the user is a domain user and, of course, removing
any single user right, similar to the "capsh" tool under SELinux.

I'm just not sure if that tool should be part of the Cygwin package or
a package of its own right.  I'm leaning towards the latter choice.


Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Project Co-Leader          cygwin AT cygwin DOT com
Red Hat

More information about the Cygwin-patches mailing list