Cygdrive mounts
Is there a way to disable the mounting of the drives either via a cygwin command or modifying the registry? cke -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Bug reporting: http://cygwin.com/bugs.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/
Re: Cygdrive mounts
At 12:52 PM 4/23/2002, Chris Ellsworth wrote: Is there a way to disable the mounting of the drives either via a cygwin command or modifying the registry? The command would be 'umount'. Why do you want to do this? Larry Hall [EMAIL PROTECTED] RFK Partners, Inc. http://www.rfk.com 838 Washington Street (508) 893-9779 - RFK Office Holliston, MA 01746 (508) 893-9889 - FAX -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Bug reporting: http://cygwin.com/bugs.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/
Re: Cygdrive mounts
I am doing install of this for sshd on windows for clients for the purpose of forwarding ports for access such as VNC, pcanywhere FTP and other items and i dont want to give access to the other areas of the drives. I tryed the umount command and have not sucessfully removed it. maybe i am doing something but here is what i have done. [admin@2k-iis-ikon]~:{103}:$ mount c:\cygwin\bin on /usr/bin type system (binmode) c:\cygwin\lib on /usr/lib type system (binmode) c:\cygwin on / type system (binmode) c: on /cygdrive/c type user (textmode,noumount) f: on /cygdrive/f type user (textmode,noumount) [admin@2k-iis-ikon]~:{104}:$ umount -U [admin@2k-iis-ikon]~:{105}:$ mount c:\cygwin\bin on /usr/bin type system (binmode) c:\cygwin\lib on /usr/lib type system (binmode) c:\cygwin on / type system (binmode) c: on /cygdrive/c type user (textmode,noumount) f: on /cygdrive/f type user (textmode,noumount) [admin@2k-iis-ikon]~:{106}:$ - Original Message - From: Larry Hall (RFK Partners, Inc) [EMAIL PROTECTED] To: Chris Ellsworth [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Tuesday, April 23, 2002 9:56 AM Subject: Re: Cygdrive mounts At 12:52 PM 4/23/2002, Chris Ellsworth wrote: Is there a way to disable the mounting of the drives either via a cygwin command or modifying the registry? The command would be 'umount'. Why do you want to do this? Larry Hall [EMAIL PROTECTED] RFK Partners, Inc. http://www.rfk.com 838 Washington Street (508) 893-9779 - RFK Office Holliston, MA 01746 (508) 893-9889 - FAX -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Bug reporting: http://cygwin.com/bugs.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/ -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Bug reporting: http://cygwin.com/bugs.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/
Re: Cygdrive mounts
I understand that through cygwin it goes around windows items but i want to remove the cygdrive mounts because the customers dont want to give access to ie /cygdrive/c or /cygdrive/drive to the people that login via ssh. - Original Message - From: Roberto J Dohnert [EMAIL PROTECTED] To: Chris Ellsworth [EMAIL PROTECTED] Sent: Tuesday, April 23, 2002 11:09 AM Subject: Re: Cygdrive mounts Just make sure that your drives are not uses as Shared folders by doing it thru cygwin you are going around your elbow to get to your asshole. excuse the pun. That would be the easiest way that i know how to do it. On Tue, 2002-04-23 at 13:45, Chris Ellsworth wrote: I am doing install of this for sshd on windows for clients for the purpose of forwarding ports for access such as VNC, pcanywhere FTP and other items and i dont want to give access to the other areas of the drives. I tryed the umount command and have not sucessfully removed it. maybe i am doing something but here is what i have done. [admin@2k-iis-ikon]~:{103}:$ mount c:\cygwin\bin on /usr/bin type system (binmode) c:\cygwin\lib on /usr/lib type system (binmode) c:\cygwin on / type system (binmode) c: on /cygdrive/c type user (textmode,noumount) f: on /cygdrive/f type user (textmode,noumount) [admin@2k-iis-ikon]~:{104}:$ umount -U [admin@2k-iis-ikon]~:{105}:$ mount c:\cygwin\bin on /usr/bin type system (binmode) c:\cygwin\lib on /usr/lib type system (binmode) c:\cygwin on / type system (binmode) c: on /cygdrive/c type user (textmode,noumount) f: on /cygdrive/f type user (textmode,noumount) [admin@2k-iis-ikon]~:{106}:$ - Original Message - From: Larry Hall (RFK Partners, Inc) [EMAIL PROTECTED] To: Chris Ellsworth [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Tuesday, April 23, 2002 9:56 AM Subject: Re: Cygdrive mounts At 12:52 PM 4/23/2002, Chris Ellsworth wrote: Is there a way to disable the mounting of the drives either via a cygwin command or modifying the registry? The command would be 'umount'. Why do you want to do this? Larry Hall [EMAIL PROTECTED] RFK Partners, Inc. http://www.rfk.com 838 Washington Street (508) 893-9779 - RFK Office Holliston, MA 01746 (508) 893-9889 - FAX -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Bug reporting: http://cygwin.com/bugs.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/ -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Bug reporting: http://cygwin.com/bugs.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/ -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Bug reporting: http://cygwin.com/bugs.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/
Re: Cygdrive mounts
OK, I see what you're doing. I thought this might be what you were driving at. You're trying to use the wrong tools to limit access. Even if you could unmount the drives in question, there's nothing to stop the user from remounting them as they like. You need to use file access permissions, either through Windows or Cygwin (with ntsec set) to make this work as you want. Larry Hall [EMAIL PROTECTED] RFK Partners, Inc. http://www.rfk.com 838 Washington Street (508) 893-9779 - RFK Office Holliston, MA 01746 (508) 893-9889 - FAX At 01:45 PM 4/23/2002, Chris Ellsworth wrote: I am doing install of this for sshd on windows for clients for the purpose of forwarding ports for access such as VNC, pcanywhere FTP and other items and i dont want to give access to the other areas of the drives. I tryed the umount command and have not sucessfully removed it. maybe i am doing something but here is what i have done. [admin@2k-iis-ikon]~:{103}:$ mount c:\cygwin\bin on /usr/bin type system (binmode) c:\cygwin\lib on /usr/lib type system (binmode) c:\cygwin on / type system (binmode) c: on /cygdrive/c type user (textmode,noumount) f: on /cygdrive/f type user (textmode,noumount) [admin@2k-iis-ikon]~:{104}:$ umount -U [admin@2k-iis-ikon]~:{105}:$ mount c:\cygwin\bin on /usr/bin type system (binmode) c:\cygwin\lib on /usr/lib type system (binmode) c:\cygwin on / type system (binmode) c: on /cygdrive/c type user (textmode,noumount) f: on /cygdrive/f type user (textmode,noumount) [admin@2k-iis-ikon]~:{106}:$ - Original Message - From: Larry Hall (RFK Partners, Inc) [EMAIL PROTECTED] To: Chris Ellsworth [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Tuesday, April 23, 2002 9:56 AM Subject: Re: Cygdrive mounts At 12:52 PM 4/23/2002, Chris Ellsworth wrote: Is there a way to disable the mounting of the drives either via a cygwin command or modifying the registry? The command would be 'umount'. Why do you want to do this? Larry Hall [EMAIL PROTECTED] RFK Partners, Inc. http://www.rfk.com 838 Washington Street (508) 893-9779 - RFK Office Holliston, MA 01746 (508) 893-9889 - FAX -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Bug reporting: http://cygwin.com/bugs.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/ -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Bug reporting: http://cygwin.com/bugs.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/ -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Bug reporting: http://cygwin.com/bugs.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/
Re: Cygdrive mounts
On Tue, 23 Apr 2002 10:45:52 -0700 Chris Ellsworth [EMAIL PROTECTED] wrote: I am doing install of this for sshd on windows for clients for the purpose of forwarding ports for access such as VNC, pcanywhere FTP and other items and i dont want to give access to the other areas of the drives. I tryed the umount command and have not sucessfully removed it. maybe i am doing something but here is what i have done. [admin@2k-iis-ikon]~:{103}:$ mount c:\cygwin\bin on /usr/bin type system (binmode) c:\cygwin\lib on /usr/lib type system (binmode) c:\cygwin on / type system (binmode) c: on /cygdrive/c type user (textmode,noumount) f: on /cygdrive/f type user (textmode,noumount) [admin@2k-iis-ikon]~:{104}:$ umount -U [admin@2k-iis-ikon]~:{105}:$ mount c:\cygwin\bin on /usr/bin type system (binmode) c:\cygwin\lib on /usr/lib type system (binmode) c:\cygwin on / type system (binmode) c: on /cygdrive/c type user (textmode,noumount) f: on /cygdrive/f type user (textmode,noumount) [admin@2k-iis-ikon]~:{106}:$ You are likely doomed to disappointment. Even if you disable /cygdrive/c, c:/xxx will probably still work. Perhaps sshd will allow you to specify a local root. You can link or mount whatever you want to allow access to from inside there. I tried umount -U -c and umount -c, but neither worked for me, probably a local system problem. I was able to delete the information in the registry (HKEY_LOCAL_MACHINE\SOFTWARE\Cygnus Solutions\Cygwin\mounts v2), but I don't know what other side effects might result so I'm putting it back right away. -- Mac :}) ** I normally forward private questions to the appropriate mail list. ** Ask Smarter: http://www.tuxedo.org/~esr/faqs/smart-questions.htm Give a hobbit a fish and he eats fish for a day. Give a hobbit a ring and he eats fish for an age. -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Bug reporting: http://cygwin.com/bugs.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/
Re: Cygdrive mounts
oh well i think what im going to do is put all the users that connect into a group then give that group deny rights to C:\ and other drives that would probly do it for me. - Original Message - From: Michael A Chase [EMAIL PROTECTED] To: Chris Ellsworth [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Tuesday, April 23, 2002 12:27 PM Subject: Re: Cygdrive mounts On Tue, 23 Apr 2002 10:45:52 -0700 Chris Ellsworth [EMAIL PROTECTED] wrote: I am doing install of this for sshd on windows for clients for the purpose of forwarding ports for access such as VNC, pcanywhere FTP and other items and i dont want to give access to the other areas of the drives. I tryed the umount command and have not sucessfully removed it. maybe i am doing something but here is what i have done. [admin@2k-iis-ikon]~:{103}:$ mount c:\cygwin\bin on /usr/bin type system (binmode) c:\cygwin\lib on /usr/lib type system (binmode) c:\cygwin on / type system (binmode) c: on /cygdrive/c type user (textmode,noumount) f: on /cygdrive/f type user (textmode,noumount) [admin@2k-iis-ikon]~:{104}:$ umount -U [admin@2k-iis-ikon]~:{105}:$ mount c:\cygwin\bin on /usr/bin type system (binmode) c:\cygwin\lib on /usr/lib type system (binmode) c:\cygwin on / type system (binmode) c: on /cygdrive/c type user (textmode,noumount) f: on /cygdrive/f type user (textmode,noumount) [admin@2k-iis-ikon]~:{106}:$ You are likely doomed to disappointment. Even if you disable /cygdrive/c, c:/xxx will probably still work. Perhaps sshd will allow you to specify a local root. You can link or mount whatever you want to allow access to from inside there. I tried umount -U -c and umount -c, but neither worked for me, probably a local system problem. I was able to delete the information in the registry (HKEY_LOCAL_MACHINE\SOFTWARE\Cygnus Solutions\Cygwin\mounts v2), but I don't know what other side effects might result so I'm putting it back right away. -- Mac :}) ** I normally forward private questions to the appropriate mail list. ** Ask Smarter: http://www.tuxedo.org/~esr/faqs/smart-questions.htm Give a hobbit a fish and he eats fish for a day. Give a hobbit a ring and he eats fish for an age. -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Bug reporting: http://cygwin.com/bugs.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/
Re: Cygdrive mounts
At 03:27 PM 4/23/2002, Michael A Chase wrote: On Tue, 23 Apr 2002 10:45:52 -0700 Chris Ellsworth [EMAIL PROTECTED] wrote: I am doing install of this for sshd on windows for clients for the purpose of forwarding ports for access such as VNC, pcanywhere FTP and other items and i dont want to give access to the other areas of the drives. I tryed the umount command and have not sucessfully removed it. maybe i am doing something but here is what i have done. [admin@2k-iis-ikon]~:{103}:$ mount c:\cygwin\bin on /usr/bin type system (binmode) c:\cygwin\lib on /usr/lib type system (binmode) c:\cygwin on / type system (binmode) c: on /cygdrive/c type user (textmode,noumount) f: on /cygdrive/f type user (textmode,noumount) [admin@2k-iis-ikon]~:{104}:$ umount -U [admin@2k-iis-ikon]~:{105}:$ mount c:\cygwin\bin on /usr/bin type system (binmode) c:\cygwin\lib on /usr/lib type system (binmode) c:\cygwin on / type system (binmode) c: on /cygdrive/c type user (textmode,noumount) f: on /cygdrive/f type user (textmode,noumount) [admin@2k-iis-ikon]~:{106}:$ You are likely doomed to disappointment. Even if you disable /cygdrive/c, c:/xxx will probably still work. Perhaps sshd will allow you to specify a local root. You can link or mount whatever you want to allow access to from inside there. I tried umount -U -c and umount -c, but neither worked for me, probably a local system problem. I was able to delete the information in the registry (HKEY_LOCAL_MACHINE\SOFTWARE\Cygnus Solutions\Cygwin\mounts v2), but I don't know what other side effects might result so I'm putting it back right away. Right. Using 'mount'/'umount' as security enforcing mechanisms is the wrong approach. Use 'chown', 'chgrp', and 'chmod' with 'ntsec' set in your CYGWIN environment variable if you want to try to do this with Cygwin. This approach also ends up being easy to compromise too though. Anyone doing this is left with needing to set the proper permissions using Windows mechanisms, I'm afraid. Larry Hall [EMAIL PROTECTED] RFK Partners, Inc. http://www.rfk.com 838 Washington Street (508) 893-9779 - RFK Office Holliston, MA 01746 (508) 893-9889 - FAX -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Bug reporting: http://cygwin.com/bugs.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/
Re: Cygdrive mounts
Yep. Larry Hall [EMAIL PROTECTED] RFK Partners, Inc. http://www.rfk.com 838 Washington Street (508) 893-9779 - RFK Office Holliston, MA 01746 (508) 893-9889 - FAX At 03:30 PM 4/23/2002, Chris Ellsworth wrote: oh well i think what im going to do is put all the users that connect into a group then give that group deny rights to C:\ and other drives that would probly do it for me. - Original Message - From: Michael A Chase [EMAIL PROTECTED] To: Chris Ellsworth [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Tuesday, April 23, 2002 12:27 PM Subject: Re: Cygdrive mounts On Tue, 23 Apr 2002 10:45:52 -0700 Chris Ellsworth [EMAIL PROTECTED] wrote: I am doing install of this for sshd on windows for clients for the purpose of forwarding ports for access such as VNC, pcanywhere FTP and other items and i dont want to give access to the other areas of the drives. I tryed the umount command and have not sucessfully removed it. maybe i am doing something but here is what i have done. [admin@2k-iis-ikon]~:{103}:$ mount c:\cygwin\bin on /usr/bin type system (binmode) c:\cygwin\lib on /usr/lib type system (binmode) c:\cygwin on / type system (binmode) c: on /cygdrive/c type user (textmode,noumount) f: on /cygdrive/f type user (textmode,noumount) [admin@2k-iis-ikon]~:{104}:$ umount -U [admin@2k-iis-ikon]~:{105}:$ mount c:\cygwin\bin on /usr/bin type system (binmode) c:\cygwin\lib on /usr/lib type system (binmode) c:\cygwin on / type system (binmode) c: on /cygdrive/c type user (textmode,noumount) f: on /cygdrive/f type user (textmode,noumount) [admin@2k-iis-ikon]~:{106}:$ You are likely doomed to disappointment. Even if you disable /cygdrive/c, c:/xxx will probably still work. Perhaps sshd will allow you to specify a local root. You can link or mount whatever you want to allow access to from inside there. I tried umount -U -c and umount -c, but neither worked for me, probably a local system problem. I was able to delete the information in the registry (HKEY_LOCAL_MACHINE\SOFTWARE\Cygnus Solutions\Cygwin\mounts v2), but I don't know what other side effects might result so I'm putting it back right away. -- Mac :}) ** I normally forward private questions to the appropriate mail list. ** Ask Smarter: http://www.tuxedo.org/~esr/faqs/smart-questions.htm Give a hobbit a fish and he eats fish for a day. Give a hobbit a ring and he eats fish for an age. -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Bug reporting: http://cygwin.com/bugs.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/ -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Bug reporting: http://cygwin.com/bugs.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/
Re: Cygdrive mounts
On Tue, Apr 23, 2002 at 12:27:45PM -0700, Michael A Chase wrote: On Tue, 23 Apr 2002 10:45:52 -0700 Chris Ellsworth [EMAIL PROTECTED] wrote: I am doing install of this for sshd on windows for clients for the purpose of forwarding ports for access such as VNC, pcanywhere FTP and other items and i dont want to give access to the other areas of the drives. I tryed the umount command and have not sucessfully removed it. maybe i am doing something but here is what i have done. [admin@2k-iis-ikon]~:{103}:$ mount c:\cygwin\bin on /usr/bin type system (binmode) c:\cygwin\lib on /usr/lib type system (binmode) c:\cygwin on / type system (binmode) c: on /cygdrive/c type user (textmode,noumount) f: on /cygdrive/f type user (textmode,noumount) [admin@2k-iis-ikon]~:{104}:$ umount -U [admin@2k-iis-ikon]~:{105}:$ mount c:\cygwin\bin on /usr/bin type system (binmode) c:\cygwin\lib on /usr/lib type system (binmode) c:\cygwin on / type system (binmode) c: on /cygdrive/c type user (textmode,noumount) f: on /cygdrive/f type user (textmode,noumount) [admin@2k-iis-ikon]~:{106}:$ You are likely doomed to disappointment. Even if you disable /cygdrive/c, c:/xxx will probably still work. Perhaps sshd will allow you to specify a local root. You can link or mount whatever you want to allow access to from inside there. I tried umount -U -c and umount -c, but neither worked for me, probably a local system problem. I was able to delete the information in the registry (HKEY_LOCAL_MACHINE\SOFTWARE\Cygnus Solutions\Cygwin\mounts v2), but I don't know what other side effects might result so I'm putting it back right away. 'umount -U -c' and 'umount -c' are the same thing. If you want to remove something from the system mount table use the options mentioned in 'umount -h' for manipulating the system mount table. However, cygwin defaults to /cygdrive, so even if you remove /cygdrive settings from the registry, /cygdrive will still work. It might be possible to mount /cygdrive to something like '/:::' or something, obfuscating its use. cgf -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Bug reporting: http://cygwin.com/bugs.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/
Re: Cygdrive mounts
but if any unix user that know what im doing can doa mount and .. well now the obscure is not so obscure any more but do think the best option si to do ethe deny rights to the group that comes in from ssh - Original Message - From: Christopher Faylor [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, April 23, 2002 12:42 PM Subject: Re: Cygdrive mounts On Tue, Apr 23, 2002 at 12:27:45PM -0700, Michael A Chase wrote: On Tue, 23 Apr 2002 10:45:52 -0700 Chris Ellsworth [EMAIL PROTECTED] wrote: I am doing install of this for sshd on windows for clients for the purpose of forwarding ports for access such as VNC, pcanywhere FTP and other items and i dont want to give access to the other areas of the drives. I tryed the umount command and have not sucessfully removed it. maybe i am doing something but here is what i have done. [admin@2k-iis-ikon]~:{103}:$ mount c:\cygwin\bin on /usr/bin type system (binmode) c:\cygwin\lib on /usr/lib type system (binmode) c:\cygwin on / type system (binmode) c: on /cygdrive/c type user (textmode,noumount) f: on /cygdrive/f type user (textmode,noumount) [admin@2k-iis-ikon]~:{104}:$ umount -U [admin@2k-iis-ikon]~:{105}:$ mount c:\cygwin\bin on /usr/bin type system (binmode) c:\cygwin\lib on /usr/lib type system (binmode) c:\cygwin on / type system (binmode) c: on /cygdrive/c type user (textmode,noumount) f: on /cygdrive/f type user (textmode,noumount) [admin@2k-iis-ikon]~:{106}:$ You are likely doomed to disappointment. Even if you disable /cygdrive/c, c:/xxx will probably still work. Perhaps sshd will allow you to specify a local root. You can link or mount whatever you want to allow access to from inside there. I tried umount -U -c and umount -c, but neither worked for me, probably a local system problem. I was able to delete the information in the registry (HKEY_LOCAL_MACHINE\SOFTWARE\Cygnus Solutions\Cygwin\mounts v2), but I don't know what other side effects might result so I'm putting it back right away. 'umount -U -c' and 'umount -c' are the same thing. If you want to remove something from the system mount table use the options mentioned in 'umount -h' for manipulating the system mount table. However, cygwin defaults to /cygdrive, so even if you remove /cygdrive settings from the registry, /cygdrive will still work. It might be possible to mount /cygdrive to something like '/:::' or something, obfuscating its use. cgf -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Bug reporting: http://cygwin.com/bugs.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/ -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Bug reporting: http://cygwin.com/bugs.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/