Re: Finally managed to create a jailed SFTP server, but how secure?

2008-12-01 Thread Eric Blake
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 According to TheO on 12/1/2008 12:13 PM: > I did some simple tests to break out my jail. From my SFTP session, I tried > to do the following: > > sftp> cd /cygdrive > sftp> cd c > Couldn't canonicalise: No such file or directory Did you verify

Re: pthread_rwlock_rdlock() returns EDEADLK when trying to call it > once

2008-12-01 Thread Christopher Faylor
On Mon, Dec 01, 2008 at 09:41:53PM +0100, kalle ko wrote: >Possible bug in winsup/cygwin/thread.cc: >... >int >pthread_rwlock::rdlock () >{ > int result = 0; > struct RWLOCK_READER *reader; > pthread_t self = pthread::self (); > > mtx.lock (); > > if (lookup_reader (self)) >{ > result

Re: NT-Authority/System will be file owner after rsync restore

2008-12-01 Thread Larry Hall (Cygwin)
Matthias Meyer wrote: create a new file /etc/test.txt bin>ls -alh /etc/test.txt bin>-rwx--+ 1 meyer Kein 0 Dec 1 23:01 /etc/test.txt Than I run a backup: After that my backup-protocol shows: create 64418/544 0 etc/Test.txt But 18/544 is SYSTEM:Administratoren as /etc/pas

Re: RSync random failures

2008-12-01 Thread Matthias Meyer
Allan Schrum wrote: >>In the event log the following message was found: > >>rsyncd: PID 1800: rsync error: error in file IO (code 11) at >>/home/lapo/packaging/rsync-3.0.4-1/src/rsync-3.0.4/clientserver.c(985) >>[receiver=3.0.4]. > > I downloaded the source, rebuilt and I am running under the de

Re: NT-Authority/System will be file owner after rsync restore

2008-12-01 Thread Matthias Meyer
Larry Hall (Cygwin) wrote: > > Could be. I don't know much about rsync. However, if that is the > uid/gid, it maps to -1 (don't know why it's represented as a 32-bit value > though.) Anyway, if you and I are right, then my WAG is that your > '/etc/passwd' and/or '/etc/group' file(s) are wrong. >

Executable File Violation

2008-12-01 Thread mailadmin
You attempted to send a message that contained an executable file. The sending of executable files via email is prohibited. The message was not delivered. For more assistance contact [EMAIL PROTECTED]--- Begin Message --- --- End Message --- Some parts of this message were removed because they

Re: Finally managed to create a jailed SFTP server, but how secure?

2008-12-01 Thread Larry Hall (Cygwin)
On 12/01/2008, TheO wrote: According to my observation, regardless of his authentication (public key or password), he can only see a limited number of directories within the jail environment. The only directory which is virtually added by Cygwin during his login, and therefore beyond my control

Re: Help needed: first time tried sshd and got stuck not far from the beginning...

2008-12-01 Thread stevench2000
Thanks Larry, Although I am not 100% certain, it may very well be it's one of the nasty case of BLODA. Looking at the list, I got at least 3 of those applications running at the background... Will continue to spend more time to figure it out. Regards, Steve Larry Hall (Cygwin) wrote: > > steve

pthread_rwlock_rdlock() returns EDEADLK when trying to call it > once

2008-12-01 Thread kalle ko
Possible bug in winsup/cygwin/thread.cc: ... int pthread_rwlock::rdlock () { int result = 0; struct RWLOCK_READER *reader; pthread_t self = pthread::self (); mtx.lock (); if (lookup_reader (self)) { result = EDEADLK; goto DONE; } ... It doesn't seem like it's possib

Avoid duplicate names in /proc/registry (which may crash find) ?

2008-12-01 Thread Christian Franke
When dirent.d_type support is added to /proc/registry (see attachment), find 4.4.0-3 crashes on keys with duplicate names. Testcases: $ find-with-d_type \ /proc/registry/HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/ALG/ISV $ find-with-d_type \ /proc/registry/HKEY_LOCAL_MACHINE/SYSTEM/ControlSet001/Se

Re: Finally managed to create a jailed SFTP server, but how secure?

2008-12-01 Thread TheO
> > Security from the standpoint of access to the remote file system and > processes come from the security measures put in place under Windows > on the remote system. SFTP under Cygwin will not provide this. It > only provids encrypted transport. > According to my observation, regardless of h

Re: Finally managed to create a jailed SFTP server, but how secure?

2008-12-01 Thread Larry Hall (Cygwin)
Larry Hall (Cygwin) wrote: TheO wrote: As far as I am concerned, user's view is restricted enough to what I allow them to see and do. If I revoke user's rights to write to any directory except /jail/home/user, then he should only be able to upload files to his jailed home directory. My q

Re: Finally managed to create a jailed SFTP server, but how secure?

2008-12-01 Thread Larry Hall (Cygwin)
TheO wrote: As far as I am concerned, user's view is restricted enough to what I allow them to see and do. If I revoke user's rights to write to any directory except /jail/home/user, then he should only be able to upload files to his jailed home directory. My question is, how secure is Cygwi

Finally managed to create a jailed SFTP server, but how secure?

2008-12-01 Thread TheO
Hi, I finally managed to create a chroot'ed (jailed) SFTP environment under Cygwin. Here are my steps which may be useful for others: - All directories from root to the chroot directory must be owned by UID 0 and GID 0. For example, if you want to jail users in /jail then / and /jail must belo

Re: Problem Starting up XEmacs

2008-12-01 Thread Dr. Volker Zell
> Sebastian Nohn writes: > Hi, > I have a strange problem starting XEmacs: > $ xemacs > *** Error in XEmacs initialization > (error "Must be string, vector, or font-instance" # "127.0.0.1:0.0" 0xb17>) > *** Backtrace > really-early-error-handler((error "Must be s

Re: sem_unlink?

2008-12-01 Thread Corinna Vinschen
On Nov 28 11:20, Christopher Faylor wrote: > On Fri, Nov 28, 2008 at 10:25:56AM +0100, Corinna Vinschen wrote: > >On Nov 28 10:09, Samuel Thibault wrote: > >> Christopher Faylor, le Thu 27 Nov 2008 21:18:23 -0500, a ?crit : > >> > On Fri, Nov 28, 2008 at 12:16:51AM +0100, Samuel Thibault wrote: > >