RE: Finally managed to create a jailed SFTP server, but how secure?

2008-12-02 Thread Albert van der Velde
Hello, I followed this discussion, but does an ftp server exist with a possibility to lock a user in its home directory preventing him to get out of this "jail". As I see this discussion I suppose that this is not possible. Seems that someone needs to add this code to an ftp server. Kind rega

Re: Finally managed to create a jailed SFTP server, but how secure?

2008-12-02 Thread TheO
Hi again, I am afraid I have to ask for clarification again :(, I hope this is the last time before I am on my own with this: > > No, you cannot hide it. It is created by Cygwin itself as a convenience > to access the virtual 'cygdrive' directory. This is one of a number of > virtual direct

[ANNOUNCEMENT] Updated: asciidoc-8.3.0-1

2008-12-02 Thread Eric Blake
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 A new version of the asciidoc package, asciidoc 8.3.0-1, is now available for download, replacing 8.2.7-1 as current. NEWS: = This is a new upstream release, with upstream changes listed below. See also the package documentation in /usr/share/doc

Re: Finally managed to create a jailed SFTP server, but how secure?

2008-12-02 Thread Larry Hall (Cygwin)
TheO wrote: Many thanks for all your responses so far and I apologize if I seem to be very persistent with my questions in this thread. Maybe it's my fault to pose a such general question. Maybe I should be more specific in my questions, asking many smaller targeted questions instead of one b

Re: Finally managed to create a jailed SFTP server, but how secure?

2008-12-02 Thread TheO
> > > Many thanks for all your responses so far and I apologize if I seem to be very persistent with my questions in this thread. Maybe it's my fault to pose a such general question. Maybe I should be more specific in my questions, asking many smaller targeted questions instead of one big on

Re: Finally managed to create a jailed SFTP server, but how secure?

2008-12-02 Thread Christopher Faylor
On Tue, Dec 02, 2008 at 02:18:07PM -0800, TheO wrote: >I promise to help promote Cygwin in Windows community if I can find a >way to make it as a secure SFTP server :). I am sure a lot of Windows >users will prefer Cygwin to other commercial softwares. I'm glad you're finding some use for Cygwin

Re: Finally managed to create a jailed SFTP server, but how secure?

2008-12-02 Thread Larry Hall (Cygwin)
TheO wrote: Risk is exactly my main concern here. I understand that in theory Cygwin, as a normal Win32 process, can't offer more protection that what Windows can. The thing is as a newbie in Cygwin, I don't know the exact inner working of Cygwin. I don't know what Cygwin does when it

Re: Finally managed to create a jailed SFTP server, but how secure?

2008-12-02 Thread TheO
> > I understand. If SFTP under Cygwin fits your needs and you can live > with the risks, then you should continue using it. I certainly don't > understand your application or its requirements for communication but > given your description above, it seems to me that 'scp' would serve your > pur

Re: NT-Authority/System will be file owner after rsync restore

2008-12-02 Thread Matthias Meyer
Larry Hall (Cygwin) wrote: > Matthias Meyer wrote: > >> create a new file /etc/test.txt >> bin>ls -alh /etc/test.txt >> bin>-rwx--+ 1 meyer Kein 0 Dec 1 23:01 /etc/test.txt >> >> Than I run a backup: >> After that my backup-protocol shows: >> create 64418/544 0 etc/Test.tx

ssh-host-config problem on windows 2003, please help.

2008-12-02 Thread T Z
I am trying to automate my cygwin install on a windows 2003 box and have even done the following before ssh-host-config is run: ntrights +r SeAssignPrimaryTokenPrivilege -u sshd ntrights +r SeCreateTokenPrivilege -u sshd ntrights +r SeDenyInteractiveLogonRight -u sshd ntrights +r SeDenyNetworkLo

RE: RSync random failures

2008-12-02 Thread Allan Schrum
>>In the event log the following message was found: > >>rsyncd: PID 1800: rsync error: error in file IO (code 11) at >>/home/lapo/packaging/rsync-3.0.4-1/src/rsync-3.0.4/clientserver.c(985) >>[receiver=3.0.4]. > > I downloaded the source, rebuilt and I am running under the debugger. The > line indi

Problem with ssh-host-config on Windows 2003

2008-12-02 Thread T Z
I am trying to automate my cygwin install on a windows 2003 box and have even done the following before ssh-host-config is run: ntrights +r SeAssignPrimaryTokenPrivilege -u sshd ntrights +r SeCreateTokenPrivilege -u sshd ntrights +r SeDenyInteractiveLogonRight -u sshd ntrights +r SeDenyNetworkLo

Re: Finally managed to create a jailed SFTP server, but how secure?

2008-12-02 Thread Larry Hall (Cygwin)
TheO wrote: If you're happy with the results, that's fine. However, you asked how secure SFTP was. The answer is as I've said. Cygwin is not the O/S. It cannot enforce restrictions on the O/S. Only the O/S can restrict or grant access to users. Thanks Larry, The reason why Cygwin is ide

Re: "watch" option processing broken

2008-12-02 Thread Brian Dessent
"Daniel B." wrote: > Similarly, if you try "watch --interval=xx echo", you get no report > that "xx" is not a valid number, or is not a valid interval value. It > seems that option-parsing messages aren't getting printed out. I get the usage summary displayed as a result of that comm

"watch" option processing broken

2008-12-02 Thread Daniel B.
I'm a little rusty on CygWin bug reporting; where should I report the following? The "watch" command isn't parsing some of its options correctly (as documented in "man watch" and in its usage message, and as it works normally on Linux). Additional, when it thinks there's a problem, it doesn't rep

Re: Avoid duplicate names in /proc/registry (which may crash find) ?

2008-12-02 Thread Corinna Vinschen
On Dec 2 07:31, Eric Blake wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > According to Corinna Vinschen on 12/2/2008 5:08 AM: > > - If find crashes in this situation, isn't this a bug in find which > > should be fixed in find? > > No. The problem is that readdir() is returning t

Re: Avoid duplicate names in /proc/registry (which may crash find) ?

2008-12-02 Thread Eric Blake
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 According to Corinna Vinschen on 12/2/2008 5:08 AM: > - If find crashes in this situation, isn't this a bug in find which > should be fixed in find? No. The problem is that readdir() is returning the same name twice, once for a directory and once f

Re: Avoid duplicate names in /proc/registry (which may crash find) ?

2008-12-02 Thread Corinna Vinschen
On Dec 2 14:38, Christian Franke wrote: > Corinna Vinschen wrote: > > - Do we really need d_type support in the registry? How often is that > > actually used? > > > > /proc/registry is probably rarely used, so d_type support is not > important. > But adding it would be trivial and the effect is

Re: Avoid duplicate names in /proc/registry (which may crash find) ?

2008-12-02 Thread Christian Franke
Corinna Vinschen wrote: > ... > > Some random thoughts: > > - Do we really need d_type support in the registry? How often is that > actually used? > /proc/registry is probably rarely used, so d_type support is not important. But adding it would be trivial and the effect is significant: Speed u

Re: Avoid duplicate names in /proc/registry (which may crash find) ?

2008-12-02 Thread Corinna Vinschen
On Dec 1 21:16, Christian Franke wrote: > When dirent.d_type support is added to /proc/registry (see attachment), > find 4.4.0-3 crashes on keys with duplicate names. > > Testcases: > > $ find-with-d_type \ > /proc/registry/HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/ALG/ISV > > $ find-with-d_type \ >

Re: Finally managed to create a jailed SFTP server, but how secure?

2008-12-02 Thread TheO
> > Did you verify whether DOS paths, such as c:\, were also blocked? > No it's not blocked from Windows. if I log on locally, I can access /cygdrive/c without any problem. But I can't using jailed SFTP, even if I use my Administrator account. > > To repeat what we have already told you m

Re: Finally managed to create a jailed SFTP server, but how secure?

2008-12-02 Thread TheO
> > If you're happy with the results, that's fine. However, you asked how > secure SFTP was. The answer is as I've said. Cygwin is not the O/S. > It cannot enforce restrictions on the O/S. Only the O/S can restrict > or grant access to users. > Thanks Larry, The reason why Cygwin is ideal