diff options
author | Darren Tucker <dtucker@dtucker.net> | 2019-03-14 08:51:17 +1100 |
---|---|---|
committer | Darren Tucker <dtucker@dtucker.net> | 2019-03-14 08:51:17 +1100 |
commit | 825ab32f0d04a791e9d19d743c61ff8ed9b4d8e5 (patch) | |
tree | fd71122578ee7062523dccc06f58dee47e60aa35 /auth2-kbdint.c | |
parent | a212107bfdf4d3e870ab7a443e4d906e5b9578c3 (diff) |
On Cygwin run sshd as SYSTEM where possible.
Seteuid now creates user token using S4U. We don't create a token
from scratch anymore, so we don't need the "Create a process token"
privilege. The service can run under SYSTEM again...
...unless Cygwin is running on Windows Vista or Windows 7 in the
WOW64 32 bit emulation layer. It turns out that WOW64 on these systems
didn't implement MsV1_0 S4U Logon so we still need the fallback
to NtCreateToken for these systems.
Signed-off-by: Corinna Vinschen <vinschen@redhat.com>
Diffstat (limited to 'auth2-kbdint.c')
0 files changed, 0 insertions, 0 deletions