This is the mail archive of the
cygwin-patches
mailing list for the Cygwin project.
Re: [Patch] Allow to disable root privileges with CYGWIN=noroot
On Oct 13 22:31, Christian Franke wrote:
> Corinna Vinschen wrote:
>> Patch checked in.
>>
>
> Thanks.
>
>> Thanks for doing this. Would you have fun to provide a tool for the
>> net distro which uses this feature?
>>
>>
>
> A first try is attached.
>
> cygdrop command ... -- Drop admin group and most privileges and run command.
> cygdrop -b command ... -- same, but keep SeBackupPrivilege (~ R/O admin :-)
Cool. Another interesting option could be to remove the domain admins
group as well, if the user is a domain user and, of course, removing
any single user right, similar to the "capsh" tool under SELinux.
I'm just not sure if that tool should be part of the Cygwin package or
a package of its own right. I'm leaning towards the latter choice.
Corinna
--
Corinna Vinschen Please, send mails regarding Cygwin to
Cygwin Project Co-Leader cygwin AT cygwin DOT com
Red Hat