Re: ntsec odds and ends (cygcheck augmentation?)

2003-02-05 Thread Christopher Faylor
Pierre or Corinna, Have either of you considered adding code to cygcheck to check for more common ntsec problems? At the very least, something along the lines of your username isn't in /etc/passwd seems like it would be worthwhile. I really would be thrilled if someone was interested in adding

Re: ntsec odds and ends (cygcheck augmentation?)

2003-02-05 Thread Pierre A. Humblet
At 11:48 AM 2/5/2003 -0500, Christopher Faylor wrote: Pierre or Corinna, Have either of you considered adding code to cygcheck to check for more common ntsec problems? At the very least, something along the lines of your username isn't in /etc/passwd seems like it would be worthwhile. Chris, I

Re: ntsec odds and ends (cygcheck augmentation?)

2003-02-05 Thread Pierre A. Humblet
At 05:52 PM 2/5/2003 +0100, Corinna Vinschen wrote: Actually I would prefer that over this extra check, changing the group name to use mkpasswd. I had some hesitations too. For a while I considered changing the user name itself, but that would cause side effects. Changing the group name doesn't

Re: ntsec odds and ends (cygcheck augmentation?)

2003-02-05 Thread Max Bowsher
On Wed, 5 Feb 2003, Pierre A. Humblet wrote: The question of Why is my HOME C:\ could also be handled in /etc/profile. I was thinking of putting something like this in it: echo Hello this is /etc/profile echo You are a new user and I will verify your configuration. echo Delete these lines

Re: ntsec odds and ends (cygcheck augmentation?)

2003-02-05 Thread Pierre A. Humblet
At 12:31 PM 2/5/2003 -0500, Igor Pechtchanski wrote: Pierre, IMHO, No entry is a better name for such a situation ([ug]id==-1). It could then be documented in the FAQ. Just my 2ยข... Igor, That's something else. ls -l print 65535 when the sid cannot be mapped to a uid/gid, which is NEVER the

Re: ntsec odds and ends (cygcheck augmentation?)

2003-02-05 Thread Christopher Faylor
On Wed, Feb 05, 2003 at 12:34:03PM -0500, Pierre A. Humblet wrote: At 05:52 PM 2/5/2003 +0100, Corinna Vinschen wrote: Actually I would prefer that over this extra check, changing the group name to use mkpasswd. I had some hesitations too. For a while I considered changing the user name itself,

Re: ntsec odds and ends (cygcheck augmentation?)

2003-02-05 Thread Pierre A. Humblet
At 01:30 PM 2/5/2003 -0500, Christopher Faylor wrote: I think that initial feedback is a *great* idea but if cygcheck can provide some kind of information that would allow diagnosing a problem, that would be useful, too. Maybe it could just dump selected fields from /etc/passwd and /etc/group. I