[freenet-dev] Adding a user for Freenet breaks startup-without-login

[Florent Daignière]

* Robert Hailey <robert at freenetproject.org> [2008-03-17 15:11:38]:

> 
> On Mar 17, 2008, at 11:45 AM, Matthew Toseland wrote:
> 
> > How hard would it be to run Freenet as the user that installed it?
> 
> Or maybe there is a flag to make a user not login-able?
> --
> Robert Hailey


Why would you want the freenet user to be login-able ?

At the moment it's probably the user of the system which has the
smallest set of rights:

@bin\ntrights.exe -u freenet +r SeServiceLogonRight > NUL
@bin\ntrights.exe -u freenet -r SeDenyServiceLogonRight > NUL
@bin\ntrights.exe -u freenet +r SeIncreaseBasePriorityPrivilege > NUL
@bin\ntrights.exe -u freenet +r SeDenyNetworkLogonRight > NUL
@bin\ntrights.exe -u freenet +r SeDenyInteractiveLogonRight > NUL
@bin\ntrights.exe -u freenet -r SeShutdownPrivilege > NUL

It can login *only* as a service and has a 12 characters long random
password.

> 
> >
> >
> > ----- toad at zceUWxlSaHLmvEMnbr4RHnVfehA ----- 2008.03.15 -  
> > 23:11:45GMT -----
> >
> > Clearly running as SYSTEM is bad. However every other service runs  
> > as SYSTEM,
> > if we just install a service to run Freenet, it will run as SYSTEM. We
> > decided this is bad so we made it run as a custom user for Freenet.
> >
> > ----- Anonymous ----- 2008.03.15 - 23:25:43GMT -----
> >
> > That's not right Toad. My computer won't just automatically boot up  
> > now. I
> > have to press the user button. Just installing freenet did this to my
> > computer without telling me.
> >
> > ----- cptn_insano at _g2YxqIynCrs2bcwLGQkr+0b544 ----- 2008.03.17 -
> > 13:58:17GMT -----
> >
> > You mean it boots up but no longer logs you in automatically.
> > Many windows boxes will login automatically if there is only one  
> > user account.
> > That is the default behavior unless steps have been taken to secure  
> > the
> > system.
> > Not using Welcome Screen & requiring Ctrl-Alt-Del to login being two  
> > examples.
> _______________________________________________
> Devl mailing list
> Devl at freenetproject.org
> http://emu.freenetproject.org/cgi-bin/mailman/listinfo/devl
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://emu.freenetproject.org/pipermail/devl/attachments/20080318/c14dd727/attachment.pgp