X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=db+wu+L3iwNQmlqWqkqwWgRozBK2RwXgI+JnAMQZerhZ7MYJRQcYA
	GFNBAR7RZrgd+n1gu031VKkQWOSXDE0R831SeCT9qRoKwZ4Qozg/RodfN5mod/Q4
	RaYEhmN+by/40qh+DzIr5rTcveLc8TJloikYSk5gz8w8HdMdHbtlrA=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	bh=v0JLZv8FARsrRljHH01Puecxe2I=; b=AUZ8SrrLzzBV4emtGV9oBADud0Ik
	DxEAHK2NpdJ6GojAc01GXr3EstUrBsPDFjtsVw9PE7woxWS5qjox35aYSqszAPnf
	LXrdTn0CHZWziVIO1Kva44h0GdPGY3MihEwntHMstOUqSCaQkzNKjT1t6749XE+i
	dzvBWqUXsfFnHhM=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
X-Spam-SWARE-Status:	No, score=-0.5 required=5.0 tests=AWL,BAYES_05,RDNS_NONE autolearn=no version=3.3.1
Date:	Tue, 23 Jul 2013 21:23:42 +0200
From:	Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To:	cygwin AT cygwin DOT com
Subject:	Re: setup-x86_64: postinstall errors: Package bash 1, Package a2ps 2 and xinit 134
Message-ID:	<20130723192342.GM9689@calimero.vinschen.de>
Reply-To:	cygwin AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
References:	<CADex0xx+uY6Y8ngZ3tUsYr+KPi0t0+H+H7X-civ-iq0diuJfZw AT mail DOT gmail DOT com> <51EE0951 DOT 90007 AT users DOT sourceforge DOT net> <51EEC7F2 DOT 5000402 AT cwilson DOT fastmail DOT fm> <20130723184615 DOT GK9689 AT calimero DOT vinschen DOT de> <51EED4B4 DOT 7000908 AT cwilson DOT fastmail DOT fm>
MIME-Version:	1.0
In-Reply-To:	<51EED4B4.7000908@cwilson.fastmail.fm>
User-Agent:	Mutt/1.5.21 (2010-09-15)

On Jul 23 15:08, Charles Wilson wrote:
> On 7/23/2013 2:46 PM, Corinna Vinschen wrote:
> >On Jul 23 14:14, Charles Wilson wrote:
> >>>I believe your report has to do with error handling when attempting
> >>>to modify the All User's Desktop, when you don't actually retain the
> >>>elevated permissions necessary to do so.
> 
> >>Is there are way for setup.exe to
> >>delegate its elevated credentials down to /bin/bash, and thence to
> >>mkshortcut.exe? Otherwise, even the *fix* for this bug will just
> >>make it not hang or crash; it will still fail to modify the
> >>all-users start menu/desktop.
> >
> >Setup does not give up any of it's permissions when starting the
> >postinstall scripts via CreateProcess.  The scripts have the same
> >permissions as setup itself, which makes a lot of sense if you think
> >about it.  Missing permissions to change system dirs should only occur
> >if setup has been started as non-admin, or if the UAC installer
> >recognition has been switched off (affects only the 32 bit version).
> 
> But even if /bin/bash is elevated, it doesn't follow that any of the
> tools launched within a script -- via cygwin's fork/exec method --
> ALSO retain that elevation.
> 
> Does it?

Yes, it does.  CreateProcess propagates its own user token untouched.

Weird question.  Did you ever start an elevated shell and lost your
admin permissions in a child process?  If that would occur, nothing
would work right in an admin shell.  Even the `id' call would not show
the admins group in your supplementary group list.


Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -