- (dtucker) [contrib/cygwin/ssh-host-config] Add SeTcbPrivilege privilege

   while setting up the ssh service account.  Patch from Corinna Vinschen.

diff --git a/ChangeLog b/ChangeLog
index 97fdfa71f41982a8d10b7d600ef1a677c8fc3440..c21a4a2af34c1fd6a13f298bd28822af62bfe896 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -5,6 +5,8 @@
    [openbsd-compat/port-solaris.h] Add support for Solaris process
    contracts, enabled with --use-solaris-contracts. Patch from Chad
    Mynhier, tweaked by dtucker@ and myself; ok dtucker@
+ - (dtucker) [contrib/cygwin/ssh-host-config] Add SeTcbPrivilege privilege
+   while setting up the ssh service account.  Patch from Corinna Vinschen.
 
 20060830
  - (djm) OpenBSD CVS Sync

diff --git a/contrib/cygwin/ssh-host-config b/contrib/cygwin/ssh-host-config
index 09cc3fcf03607b0b54f3dc674230387ef767da5e..e2ad69f19f81146d58d2fdc229781a67b036ffd7 100644 (file)
--- a/contrib/cygwin/ssh-host-config
+++ b/contrib/cygwin/ssh-host-config
@@ -516,6 +516,7 @@ then
            fi
            editrights -a SeAssignPrimaryTokenPrivilege -u sshd_server &&
            editrights -a SeCreateTokenPrivilege -u sshd_server &&
+           editrights -a SeTcbPrivilege -u sshd_server &&
            editrights -a SeDenyInteractiveLogonRight -u sshd_server &&
            editrights -a SeDenyNetworkLogonRight -u sshd_server &&
            editrights -a SeDenyRemoteInteractiveLogonRight -u sshd_server &&