diff options
| -rw-r--r-- | winsup/cygwin/sec_auth.cc | 10 |
1 files changed, 7 insertions, 3 deletions
diff --git a/winsup/cygwin/sec_auth.cc b/winsup/cygwin/sec_auth.cc index aef13191d..d44cb2d81 100644 --- a/winsup/cygwin/sec_auth.cc +++ b/winsup/cygwin/sec_auth.cc @@ -172,13 +172,17 @@ cygwin_logon_user (const struct passwd *pw, const char *password) } else { + HANDLE hPrivToken = NULL; + /* See the comment in get_full_privileged_inheritable_token for a description why we enable TCB privileges here. */ push_self_privilege (SE_TCB_PRIVILEGE, true); - hToken = get_full_privileged_inheritable_token (hToken); + hPrivToken = get_full_privileged_inheritable_token (hToken); pop_self_privilege (); - if (!hToken) - hToken = INVALID_HANDLE_VALUE; + if (!hPrivToken) + debug_printf ("Can't fetch linked token (%E), use standard token"); + else + hToken = hPrivToken; } RtlSecureZeroMemory (passwd, NT_MAX_PATH); cygheap->user.reimpersonate (); |