This is the mail archive of the cygwin@cygwin.com mailing list for the Cygwin project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]

Re: ntsec environment variable


On Wed, Apr 18, 2001 at 09:36:53AM -0400, Charles S. Wilson wrote:
> Corinna Vinschen wrote:
> > 
> > That's the point. Users only can use chown if they have the user
> > right "Restore files and directories". That right is only given to
> > the groups "Administrators" and "Backup Operators" by default.
> > That's ...similar... to Unix systems.
> > 
> 
> I'd like to point out that granting the "Restore files and directories"
> right to ordinary users defeats any security provided by windows NTFS. 
> That right basically gives the user the ability to defeat any
> permissions restrictions -- both from within cygwin and in normal
> Windows usage.

Correct. Creating directories for users using the appropriate
permissions is the job of the administrator as it's the job of
root in U*X environments. Using chmod later on own objects is
ok for the normal user.

Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Developer                                mailto:cygwin@cygwin.com
Red Hat, Inc.

--
Want to unsubscribe from this list?
Check out: http://cygwin.com/ml/#unsubscribe-simple


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]