Re: ntsec odds and ends

2003-02-08 Thread Max Bowsher
> At 03:05 PM 2/6/2003 -, Max Bowsher wrote: >> Truncation by ls shouldn't matter much. I would say that a new user >> is more likely to notice "run mkpa" than "mkpasswd". Pierre A. Humblet wrote: > Max got exactly right why I had put the "run" in. > 1.3.19 already contains an embryo of the id

Re: ntsec odds and ends

2003-02-08 Thread Pierre A. Humblet
At 03:05 PM 2/6/2003 -, Max Bowsher wrote: + if (myself->uid == UNKNOWN_UID) + strcpy (group_name, "run mkpasswd"); /* Feedback... */ >>> >>> I've changed that to just "mkpasswd". >>> >>> I don't like to introduce group names with spaces in it. And since >>> they are longer than

Re: [doc PATCH] Re: ntsec odds and ends, take 2

2003-02-07 Thread Corinna Vinschen
On Fri, Feb 07, 2003 at 10:24:53AM -0500, Igor Pechtchanski wrote: > ChangeLog (needed?): Yes, always! > 2003-02-06 Igor Pechtchanski <[EMAIL PROTECTED]> > > * ntsec.sgml: Add note on special names for missing > user/group. Applied. Thanks, Corinna -- Corinna Vinschen

[ls PATCH] Re: ntsec odds and ends

2003-02-07 Thread Igor Pechtchanski
On Thu, 6 Feb 2003, Igor Pechtchanski wrote: > > I just had another really wild idea (feel free to ignore): since we want > this visible in the "ls" output, suppose ls recognized these special names > you are going to use (whatever they are), and used the existing > "--color=auto" mechanism to ou

[doc PATCH] Re: ntsec odds and ends, take 2

2003-02-07 Thread Igor Pechtchanski
On Fri, 7 Feb 2003, Corinna Vinschen wrote: > On Thu, Feb 06, 2003 at 02:49:59PM -0500, Igor Pechtchanski wrote: > > Yes, it is. What I meant was "files show up in the 'ls -l' listing with > > '' in the user field". Since the Administrators group is not the > > current user, this field w

Re: ntsec odds and ends

2003-02-07 Thread Corinna Vinschen
On Thu, Feb 06, 2003 at 02:49:59PM -0500, Igor Pechtchanski wrote: > Yes, it is. What I meant was "files show up in the 'ls -l' listing with > '' in the user field". Since the Administrators group is not the > current user, this field won't be set to whatever the default is, will it? It

Re: ntsec odds and ends

2003-02-06 Thread Igor Pechtchanski
On Thu, 6 Feb 2003, Corinna Vinschen wrote: > On Thu, Feb 06, 2003 at 01:10:33PM -0500, Igor Pechtchanski wrote: > > No problem, I'll rewrite this (after actually looking at the code this > > time). However, at least on my machine, most of the files, especially in > > /cygdrive/c, are owned by th

Re: ntsec odds and ends

2003-02-06 Thread Corinna Vinschen
On Thu, Feb 06, 2003 at 01:28:37PM -0500, Christopher Faylor wrote: > On Thu, Feb 06, 2003 at 07:24:13PM +0100, Corinna Vinschen wrote: > >I think we never get that right. The problem is that the ls entries > >only are 8 chars long, not enough to be really informative. Whatever > >you put in ther

Re: ntsec odds and ends

2003-02-06 Thread Igor Pechtchanski
On Thu, 6 Feb 2003, Christopher Faylor wrote: > On Thu, Feb 06, 2003 at 07:24:13PM +0100, Corinna Vinschen wrote: > >On Thu, Feb 06, 2003 at 01:10:33PM -0500, Igor Pechtchanski wrote: > >> No problem, I'll rewrite this (after actually looking at the code this > >> time). However, at least on my m

Re: ntsec odds and ends

2003-02-06 Thread Christopher Faylor
On Thu, Feb 06, 2003 at 07:24:13PM +0100, Corinna Vinschen wrote: >On Thu, Feb 06, 2003 at 01:10:33PM -0500, Igor Pechtchanski wrote: >> No problem, I'll rewrite this (after actually looking at the code this >> time). However, at least on my machine, most of the files, especially in >> /cygdrive/c

Re: ntsec odds and ends

2003-02-06 Thread Corinna Vinschen
On Thu, Feb 06, 2003 at 01:10:33PM -0500, Igor Pechtchanski wrote: > No problem, I'll rewrite this (after actually looking at the code this > time). However, at least on my machine, most of the files, especially in > /cygdrive/c, are owned by the Administrators group. If it's not in > /etc/passwd

Re: ntsec odds and ends

2003-02-06 Thread Igor Pechtchanski
On Thu, 6 Feb 2003, Corinna Vinschen wrote: > On Thu, Feb 06, 2003 at 11:37:16AM -0500, Igor Pechtchanski wrote: > > + > > +If a user or group is not present in /etc/passwd (or > > +if a group is not present in /etc/group), it will have > > +a special user/group id of -1 (which would be shown by l

Re: ntsec odds and ends

2003-02-06 Thread Corinna Vinschen
On Thu, Feb 06, 2003 at 11:37:16AM -0500, Igor Pechtchanski wrote: > + > +If a user or group is not present in /etc/passwd (or > +if a group is not present in /etc/group), it will have > +a special user/group id of -1 (which would be shown by ls > +as 65535). In releases of Cygwin before 1.3.20, t

Re: ntsec odds and ends

2003-02-06 Thread Igor Pechtchanski
On Thu, 6 Feb 2003, Corinna Vinschen wrote: > On Thu, Feb 06, 2003 at 09:49:32AM -0500, Igor Pechtchanski wrote: > > Umm, Corinna, suppose some misguided soul would actually create a user > > named "mkpasswd" (or a group called "mkgroup")? What then? Perhaps a > > note in the User Guide's ntsec

Re: ntsec odds and ends

2003-02-06 Thread Max Bowsher
> On Thu, 6 Feb 2003, Corinna Vinschen wrote: >>> - char group_name [UNLEN + 1] = "mkgroup"; >>> + char group_name [UNLEN + 1] = "run mkgroup"; >> >> I didn't commit this change. >> >>> + if (myself->uid == UNKNOWN_UID) >>> + strcpy (group_name, "run mkpasswd"); /* Feedback... */ >>

Re: ntsec odds and ends

2003-02-06 Thread Corinna Vinschen
On Thu, Feb 06, 2003 at 09:49:32AM -0500, Igor Pechtchanski wrote: > Umm, Corinna, suppose some misguided soul would actually create a user > named "mkpasswd" (or a group called "mkgroup")? What then? Perhaps a > note in the User Guide's ntsec section is in order? Or an FAQ? Feel free to write

Re: ntsec odds and ends

2003-02-06 Thread Igor Pechtchanski
On Thu, 6 Feb 2003, Corinna Vinschen wrote: > On Wed, Feb 05, 2003 at 11:41:59AM -0500, Pierre A. Humblet wrote: > > 2003-02-05 Pierre Humblet <[EMAIL PROTECTED]> > > > > * security.h: Introduce names UNKNOWN_UID and UNKNOWN_GID and delete > > declaration of is_grp_member. > > * uinf

Re: ntsec odds and ends

2003-02-06 Thread Corinna Vinschen
On Wed, Feb 05, 2003 at 11:41:59AM -0500, Pierre A. Humblet wrote: > 2003-02-05 Pierre Humblet <[EMAIL PROTECTED]> > > * security.h: Introduce names UNKNOWN_UID and UNKNOWN_GID and delete > declaration of is_grp_member. > * uinfo.cc (internal_getlogin): Use UNKNOWN_GID. >

Re: ntsec odds and ends (cygcheck augmentation?)

2003-02-05 Thread Pierre A. Humblet
At 01:30 PM 2/5/2003 -0500, Christopher Faylor wrote: >I think that initial feedback is a *great* idea but if cygcheck can >provide some kind of information that would allow diagnosing a >problem, that would be useful, too. > >Maybe it could just dump selected fields from /etc/passwd and >/etc/grou

Re: ntsec odds and ends (cygcheck augmentation?)

2003-02-05 Thread Christopher Faylor
On Wed, Feb 05, 2003 at 12:34:03PM -0500, Pierre A. Humblet wrote: >At 05:52 PM 2/5/2003 +0100, Corinna Vinschen wrote: >> >>Actually I would prefer that over this extra check, changing the >>group name to "use mkpasswd". > >I had some hesitations too. For a while I considered changing the >user na

Re: ntsec odds and ends (cygcheck augmentation?)

2003-02-05 Thread Pierre A. Humblet
At 12:31 PM 2/5/2003 -0500, Igor Pechtchanski wrote: >Pierre, > >IMHO, "No entry" is a better name for such a situation ([ug]id==-1). It >could then be documented in the FAQ. Just my 2ยข... Igor, That's something else. ls -l print 65535 when the sid cannot be mapped to a uid/gid, which is NEVER

Re: ntsec odds and ends (cygcheck augmentation?)

2003-02-05 Thread Max Bowsher
> On Wed, 5 Feb 2003, Pierre A. Humblet wrote: >> The question of "Why is my HOME C:\ " could also be handled in >> /etc/profile. I was thinking of putting something like this in it: >> echo "Hello this is /etc/profile" >> echo "You are a new user and I will verify your configuration". >> echo "Del

Re: ntsec odds and ends (cygcheck augmentation?)

2003-02-05 Thread Pierre A. Humblet
At 05:52 PM 2/5/2003 +0100, Corinna Vinschen wrote: > >Actually I would prefer that over this extra check, changing the >group name to "use mkpasswd". I had some hesitations too. For a while I considered changing the user name itself, but that would cause side effects. Changing the group name does

Re: ntsec odds and ends (cygcheck augmentation?)

2003-02-05 Thread Igor Pechtchanski
On Wed, 5 Feb 2003, Pierre A. Humblet wrote: > At 11:48 AM 2/5/2003 -0500, Christopher Faylor wrote: > >Pierre or Corinna, > >Have either of you considered adding code to cygcheck to check for more > >common ntsec "problems"? At the very least, something along the lines > >of "your username isn't

Re: ntsec odds and ends (cygcheck augmentation?)

2003-02-05 Thread Pierre A. Humblet
At 11:48 AM 2/5/2003 -0500, Christopher Faylor wrote: >Pierre or Corinna, >Have either of you considered adding code to cygcheck to check for more >common ntsec "problems"? At the very least, something along the lines >of "your username isn't in /etc/passwd" seems like it would be >worthwhile. Ch

Re: ntsec odds and ends (cygcheck augmentation?)

2003-02-05 Thread Corinna Vinschen
On Wed, Feb 05, 2003 at 11:48:34AM -0500, Christopher Faylor wrote: > Pierre or Corinna, > Have either of you considered adding code to cygcheck to check for more > common ntsec "problems"? At the very least, something along the lines > of "your username isn't in /etc/passwd" seems like it would b

Re: ntsec odds and ends (cygcheck augmentation?)

2003-02-05 Thread Christopher Faylor
Pierre or Corinna, Have either of you considered adding code to cygcheck to check for more common ntsec "problems"? At the very least, something along the lines of "your username isn't in /etc/passwd" seems like it would be worthwhile. I really would be thrilled if someone was interested in addin