Security Issue with Cygwin

[Robert Collins]

On Thu, 2003-01-23 at 11:48, Lambeth Darwin wrote:
> To whom it may concern;
> 
> Not sure if you know this or not, but the default configuration with Cygwin allows any user to change to any directory on a W2K box and delete whatever files they want. I have installed it with the current default instructions and was able to logon as a regular domain user and cd to c: and delete or add files. That is a major issue. Let me know if there is something I missed.

Thats the Microsoft default install that grants those permissions.
Cygwin doesn't affect permissions outside of the cygwin directory tree.

Rob
-- 
GPG key available at: <http://users.bigpond.net.au/robertc/keys.txt>.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://cygwin.com/pipermail/cygwin/attachments/20030123/b82dd408/attachment.sig>