From 77f7d47462656aa9fdcd29a5db5885e07b6dc1c9 Mon Sep 17 00:00:00 2001
From: dtucker <dtucker>
Date: Thu, 31 Aug 2006 01:28:49 +0000
Subject: [PATCH]  - (dtucker) [contrib/cygwin/ssh-host-config] Add
 SeTcbPrivilege privilege    while setting up the ssh service account.  Patch
 from Corinna Vinschen.

---
 ChangeLog                      | 2 ++
 contrib/cygwin/ssh-host-config | 1 +
 2 files changed, 3 insertions(+)

diff --git a/ChangeLog b/ChangeLog
index 97fdfa71..c21a4a2a 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -5,6 +5,8 @@
    [openbsd-compat/port-solaris.h] Add support for Solaris process
    contracts, enabled with --use-solaris-contracts. Patch from Chad
    Mynhier, tweaked by dtucker@ and myself; ok dtucker@
+ - (dtucker) [contrib/cygwin/ssh-host-config] Add SeTcbPrivilege privilege
+   while setting up the ssh service account.  Patch from Corinna Vinschen.
 
 20060830
  - (djm) OpenBSD CVS Sync
diff --git a/contrib/cygwin/ssh-host-config b/contrib/cygwin/ssh-host-config
index 09cc3fcf..e2ad69f1 100644
--- a/contrib/cygwin/ssh-host-config
+++ b/contrib/cygwin/ssh-host-config
@@ -516,6 +516,7 @@ then
 	    fi
 	    editrights -a SeAssignPrimaryTokenPrivilege -u sshd_server &&
 	    editrights -a SeCreateTokenPrivilege -u sshd_server &&
+	    editrights -a SeTcbPrivilege -u sshd_server &&
 	    editrights -a SeDenyInteractiveLogonRight -u sshd_server &&
 	    editrights -a SeDenyNetworkLogonRight -u sshd_server &&
 	    editrights -a SeDenyRemoteInteractiveLogonRight -u sshd_server &&
-- 
2.45.2