summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorDarren Tucker <dtucker@zip.com.au>2006-08-31 11:28:49 +1000
committerDarren Tucker <dtucker@zip.com.au>2006-08-31 11:28:49 +1000
commit288cbbd59ed70dc137f83588a9ded946069776cc (patch)
tree78605dc2d751a4ba37cc52ba097aaeb0d9c27a7c
parent1b06dc30ad4692ec76c476d130ba7366f7ebfef2 (diff)
- (dtucker) [contrib/cygwin/ssh-host-config] Add SeTcbPrivilege privilege
while setting up the ssh service account. Patch from Corinna Vinschen.
-rw-r--r--ChangeLog4
-rw-r--r--contrib/cygwin/ssh-host-config1
2 files changed, 4 insertions, 1 deletions
diff --git a/ChangeLog b/ChangeLog
index 0a702d3f..bef6b053 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -5,6 +5,8 @@
[openbsd-compat/port-solaris.h] Add support for Solaris process
contracts, enabled with --use-solaris-contracts. Patch from Chad
Mynhier, tweaked by dtucker@ and myself; ok dtucker@
+ - (dtucker) [contrib/cygwin/ssh-host-config] Add SeTcbPrivilege privilege
+ while setting up the ssh service account. Patch from Corinna Vinschen.
20060830
- (djm) OpenBSD CVS Sync
@@ -5346,4 +5348,4 @@
- (djm) Trim deprecated options from INSTALL. Mention UsePAM
- (djm) Fix quote handling in sftp; Patch from admorten AT umich.edu
-$Id: ChangeLog,v 1.4519 2006/08/30 17:24:41 djm Exp $
+$Id: ChangeLog,v 1.4520 2006/08/31 01:28:49 dtucker Exp $
diff --git a/contrib/cygwin/ssh-host-config b/contrib/cygwin/ssh-host-config
index 09cc3fcf..e2ad69f1 100644
--- a/contrib/cygwin/ssh-host-config
+++ b/contrib/cygwin/ssh-host-config
@@ -516,6 +516,7 @@ then
fi
editrights -a SeAssignPrimaryTokenPrivilege -u sshd_server &&
editrights -a SeCreateTokenPrivilege -u sshd_server &&
+ editrights -a SeTcbPrivilege -u sshd_server &&
editrights -a SeDenyInteractiveLogonRight -u sshd_server &&
editrights -a SeDenyNetworkLogonRight -u sshd_server &&
editrights -a SeDenyRemoteInteractiveLogonRight -u sshd_server &&