| All Forums |
Register |
Login |
Search |
Subscriptions |
My Profile |
Inbox |
| Tool Warehouse |
FAQs |
Resources |
Help |
Member List |
Address Book |
Logout |
|
|
Running apps after ' su'
|
Logged in as: Guest |
| Users viewing this topic: none |
|
Login  |
|
|
 Running apps after ' su' - Oct. 16, '02, 3:23:06 PM
|
|
|
arorlik
Posts: 10
Joined: Oct. 2, '02,
Status: offline
|
Does anyone know why it is when you change the user (su) in a shell, you are not able to run Windows GUI applications? I get an error saying the application cannot be run in a Telnet session, however it isn' t a telnet session, it' s just a user change.
|
|
|
|
|
RE: Running apps after ' su' - Oct. 17, '02, 12:33:53 AM
|
|
|
Rodney
Posts: 3728
Joined: Jul. 9, '02,
From: /Tools lab
Status: offline
|
The glass screen that you run Win32 GUI apps on is called a workstation. That workstation is assigned to a particular user and has security protection on it. Whenever someone telnets in or uses an xterm or does a ' su' that user is put into a new station. Stations are not allowed to mix together. Otherwise you could end up with the nasty situation (from a security viewpoint) of another user running apps on your screen. It' s a difficult and slippery slope to say that certain users are allowed at certain time to do certain things.
The error message coming out has obviously been made too specific to the case of the session being done by telnet.
|
|
|
|
|
RE: Running apps after ' su' - Oct. 17, '02, 9:26:53 AM
|
|
|
arorlik
Posts: 10
Joined: Oct. 2, '02,
Status: offline
|
Thanks for your response, Rodney. So, even if the user is changed to Administrator (which is what I' ve been changing to) then Win32 GUI apps cannot be run? Also, I notice in the SFU help files that there are two separate su pages; one under Administrator Utilities and one under Commands and Utilities. Each synopsis is different, though the command itself is the same. What is the difference between these two ' su' commands?
|
|
|
|
|
RE: Running apps after ' su' - Oct. 17, '02, 11:01:06 AM
|
|
|
Rodney
Posts: 3728
Joined: Jul. 9, '02,
From: /Tools lab
Status: offline
|
> Thanks for your response, Rodney. So, even if the user is changed to
> Administrator (which is what I' ve been changing to) then Win32 GUI
> apps cannot be run?
Correct. For the Admin to use Win32 GUI programs the Admin needs to be logged in on the glass. Non-GUI apps can still be run such as " net" .
> Also, I notice in the SFU help files that there are two separate su
> pages; one under Administrator Utilities and one under Commands and
> Utilities. Each synopsis is different, though the command itself is
> the same. What is the difference between these two ' su' commands?
The one under commands and utilities matches the regular man page. That' s the one used from an Interix shell. The one under Admin utilities says its a windows-based utility. You' ll get this one running from a Win32 command prompt. The difference is as written on those pages. The Interix ' su' works as the traditional Unix ' su' does: when you know the password you can change to a user; your priviledges and permissions are not cumlative. The Win32 version requires that you have a number of privleges already as listed in the Admin ' su' help page. BTW the Admin help page calls them " permissions" but this is incorrect, they are actually " privileges" in NT kernel-speak. When using this ' su' the user with these privileges needs no password. It' s dangerous to assign these privileges to any user other than SYSTEM (which is what the kernel and subsystems need to run with). I' d go by ye olde rule of thumb in that if you don' t know entirely already what the Admin ' su' help page is describing (i.e. SeBatchLogonRight) it' s best to leave it alone.
|
|
|
|
 New Messages |
 No New Messages |
 Hot Topic w/ New Messages |
 Hot Topic w/o New Messages |
|
 Locked w/ New Messages |
 Locked w/o New Messages |
|
 Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts |
|
|
|
Printable Version
