[Patch] Allow to disable root privileges with CYGWIN=noroot

Corinna Vinschen corinna-cygwin@cygwin.com
Wed Oct 14 12:02:00 GMT 2009

On Oct 14 13:24, Christian Franke wrote:
> Corinna Vinschen wrote:
> > 
> > Cool.  Another interesting option could be to remove the domain admins
> > group as well, if the user is a domain user and, of course, removing
> > any single user right, similar to the "capsh" tool under SELinux.
> > 
> Yes, makes sense.
> > I'm just not sure if that tool should be part of the Cygwin package or
> > a package of its own right.  I'm leaning towards the latter choice.
> > 
> > 
> ... or add it to the cygutils package ?

Sure, if Chuck likes the idea.

> Is there any tool to print the info provided by GetTokenInformation() ?
> I have a preliminary version of such a tool and can contribute it later
> if desired.

I have a self-hacked version of such a tool which you can download
from here: http://cygwin.de/gettokinfo/

  `gettokinfo' prints everything except for the list of user rights.
  `gettokinfo foo' prints everything including the user rights.

The tool does not print the session ID, nor the new stuff introduced
with Windows Vista yet.


Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Project Co-Leader          cygwin AT cygwin DOT com
Red Hat

More information about the Cygwin-patches mailing list