This is the mail archive of the cygwin@cygwin.com mailing list for the Cygwin project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

Re: cron and NT domains


Dave,

On Wed, Jul 10, 2002 at 07:38:38AM -0700, David MacMahon wrote:
> So your jt user has crontabs running?

Yes.

> Doesn't this seem like a security hole?  I mean, couldn't you just
> concoct an /etc/passwd entry for any domain user and then impersonate
> them via their crontab?

I don't know -- I haven't tried.

> Did you give any extra NT permissions to anyone like PALO-ALTO\JATIS
> or SYSTEM, for example?

No.

> Maybe we have different types/configurations of NT domain controllers?

Sounds like it, see below...

> The only thing that's a little bit weird about my setup is that my PC
> belongs to one domain, but I log into (login to?) another.

I think the above may be your problem.  Which entry do you have in your
/etc/passwd file?  The one from the PC's domain or the one that you log
into?  If the former, then try the latter.

Jason

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]