On Apr 19 15:58, Andrew Jorgensen wrote: > After a good deal of debugging Microsoft has advised me that if sshd > would start the user process with NT AUTHORITY\INTERACTIVE as one of > it's groups, which should be possible by simply changing the > parameters used when spawning the new process, or so they tell me.
Current Cygwin 1.5.24 doesn't add the interactive group to the token's group list automatically. This has been changed in current CVS and you could try if a recent developer snapshot (http://cygwin.com/snapshots/) works for you. If that helps, you could create your own 1.5.24 version, applying the patch, which should have the same effect. YMMV. Index: security.cc =================================================================== RCS file: /cvs/src/src/winsup/cygwin/security.cc,v retrieving revision 1.194.4.1 diff -u -p -r1.194.4.1 security.cc --- security.cc 16 Oct 2006 12:46:34 -0000 1.194.4.1 +++ security.cc 20 Apr 2007 11:17:09 -0000 @@ -473,8 +473,7 @@ get_token_group_sidlist (cygsidlist &grp grp_list += well_known_network_sid; if (sid_in_token_groups (my_grps, well_known_batch_sid)) grp_list += well_known_batch_sid; - if (sid_in_token_groups (my_grps, well_known_interactive_sid)) - grp_list += well_known_interactive_sid; + grp_list += well_known_interactive_sid; if (sid_in_token_groups (my_grps, well_known_service_sid)) grp_list += well_known_service_sid; } Corinna -- Corinna Vinschen Please, send mails regarding Cygwin to Cygwin Project Co-Leader cygwin AT cygwin DOT com Red Hat -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/
