On Feb 12 10:19, Pierre A. Humblet wrote: > From: "Corinna Vinschen" > | I think it was always there, but I'm not sure. > > It's hard to believe that the bug has always been there on foreign machines... > A few other things: > > 1) I had the feeling that we have already discussed this in the past. > Take a look at > http://www.cygwin.com/ml/cygwin-patches/2002-q4/msg00255.html > (last line). Thanks to google :)
Cool! Look at the date! So I did it again wrong after you already fixed it in 2002. Oh well. Btw, I tested this today and it seems the patch is working. I'll just change it to use a well_known_builtin_sid rather than creating the SID on the fly. > 2) About http://cygwin.com/ml/cygwin/2010-01/msg00334.html > USERS is already always added to the token. It's done in > get_token_group_sidlist. Yes, but not in 1.7.1. This is new since 2010-01-08. > 3) There is another major bug: scripts don't get executed while impersonated. > The problem is in access. > > cron has setuid and tries to run sendmail ==> /bin/cronlog > 502 3438682 [main] cron 4000 av::fixup: C:\Program > Files\cygwin_1.7\bin\cronlog is possibly a > script > 1832 3440514 [main] cron 4000 seterrno_from_win_error: > ../../../../src/winsup/cygwin/security.cc:766 windows erro$ > 61 3440575 [main] cron 4000 geterrno_from_win_error: windows error 6 == > errno 9 > 21 3440596 [main] cron 4000 __set_errno: void > seterrno_from_win_error(const char*, int, > DWORD):319 val 9 > 21 3440617 [main] cron 4000 check_file_access: flags 1, ret -1net helpmsg 6 > > net helpmsg 6 > The handle is invalid. > > I will get to it but if you have an idea let me know. I have no idea, sorry. The Win32 error 6 is an invalid handle. But the token used here is always an impersonation token, just as AccessCheck requires. That's puzzeling. > 4) Finally I noticed that perl doesn't run with the cygwin0.dll I built in > cvs (last nite). > Not sure if you see that too. I see that, too. But that's something for another thread, please. Corinna -- Corinna Vinschen Please, send mails regarding Cygwin to Cygwin Project Co-Leader cygwin AT cygwin DOT com Red Hat -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
