From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 39307 invoked by alias); 6 Mar 2019 18:33:33 -0000 Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Received: (qmail 39296 invoked by uid 89); 6 Mar 2019 18:33:32 -0000 Authentication-Results: sourceware.org; auth=none X-Spam-SWARE-Status: No, score=0.8 required=5.0 tests=BAYES_00,DNS_FROM_AHBL_RHSBL,SPF_PASS,TIME_LIMIT_EXCEEDED autolearn=unavailable version=3.3.1 spammy= X-HELO: mx009.vodafonemail.xion.oxcs.net Received: from mx009.vodafonemail.xion.oxcs.net (HELO mx009.vodafonemail.xion.oxcs.net) (153.92.174.39) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with ESMTP; Wed, 06 Mar 2019 18:33:22 +0000 Received: from vsmx002.vodafonemail.xion.oxcs.net (unknown [192.168.75.192]) by mta-6-out.mta.xion.oxcs.net (Postfix) with ESMTP id 939E9D9B0F1 for ; Wed, 6 Mar 2019 18:33:20 +0000 (UTC) Received: from Gertrud (unknown [87.185.218.207]) by mta-6-out.mta.xion.oxcs.net (Postfix) with ESMTPA id 6266F199C3B for ; Wed, 6 Mar 2019 18:33:18 +0000 (UTC) From: Achim Gratz To: cygwin@cygwin.com Subject: Re: Logging-in using ssh elevates the user privilege. References: <20190307010000.fc28b73739c2dd66e609982b@nifty.ne.jp> Date: Wed, 06 Mar 2019 18:33:00 -0000 In-Reply-To: <20190307010000.fc28b73739c2dd66e609982b@nifty.ne.jp> (Takashi Yano's message of "Thu, 7 Mar 2019 01:00:00 +0900") Message-ID: <87ftrz6efm.fsf@Rainer.invalid> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.1 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-SW-Source: 2019-03/txt/msg00116.txt.bz2 Takashi Yano writes: > I would like to report a problem of recent cygwin. > > If a user logs in via ssh, the user aqcuires the elevated > privilege if the user belongs to Administrators group. This has been the case for as long as I use ssh logins and is by design. You can drop privileges after logon (see cygdrop), but not aquire new ones. So if that's changed behaviour for you, then your ssh logins didn't actually work the way you thought they were. Regards, Achim. -- +<[Q+ Matrix-12 WAVE#46+305 Neuron microQkb Andromeda XTk Blofeld]>+ SD adaptation for Waldorf rackAttack V1.04R1: http://Synth.Stromeko.net/Downloads.html#WaldorfSDada -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple