delorie.com/archives/browse.cgi   search  
Mail Archives: cygwin/2014/02/16/12:39:23

X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
:list-unsubscribe:list-subscribe:list-archive:list-post
:list-help:sender:message-id:date:from:mime-version:to:subject
:references:in-reply-to:content-type:content-transfer-encoding;
q=dns; s=default; b=kSpqUg/GzwaN7MzXxQcD+zPt6AI+IMua41V/O8GGx7i
itTrYK8Gj5ChWJJAizon/r7SrijDyOFJ8pP4kiyGlJMHjsuhkGtFjMjP4Y4RfSkw
IJFjBTgg6zaZ30HfT8uQBRvN3JDlZ/WIHVGxFRefBxyJtyYkUSdgxnUj6i1jtrNE
=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
:list-unsubscribe:list-subscribe:list-archive:list-post
:list-help:sender:message-id:date:from:mime-version:to:subject
:references:in-reply-to:content-type:content-transfer-encoding;
s=default; bh=wO2GVplDYc0JK88RL1o1fN7HgpM=; b=K5kunxnPuIJE/wzi3
Y2C7EOpyJP9NZ6EJejTb0O2LHzRrD5kSciiLs5t2m18R57IPUIuj/F6Jny3MqjBN
yC4L70yV2z9T3lfZQTi4CGNKlj+JegD0LvqBpOusSp39/8hs5gcemSOSAWofCP7q
Y/+6eiPUvJ8BlLEplaUXhlbPbA=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=0.5 required=5.0 tests=AWL,BAYES_50,RCVD_IN_DNSWL_NONE,RP_MATCHES_RCVD,SPF_PASS,UNSUBSCRIBE_BODY autolearn=no version=3.3.2
X-HELO: vms173023pub.verizon.net
Message-id: <5300F7A2.5080601@verizon.net>
Date: Sun, 16 Feb 2014 12:38:42 -0500
From: Gerry Reno <greno AT verizon DOT net>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130625 Thunderbird/17.0.7
MIME-version: 1.0
To: cygwin AT cygwin DOT com
Subject: Re: Installer cannot write to Cygwin's /usr/local/etc
References: <53001E78 DOT 8060706 AT verizon DOT net> <53006573 DOT 9080301 AT gmail DOT com>
In-reply-to: <53006573.9080301@gmail.com>
X-IsSubscribed: yes

On 02/16/2014 02:14 AM, Marco Atzeri wrote:
> On 16/02/2014 03:12, Gerry Reno wrote:
>> I have a Windows MSI installer that first loads Cygwin and then has a deferred copy of some files into /usr/local/bin
>> and /usr/local/etc.
>>
>> The copies into /usr/local/bin succeed fine.
>>
>> The copies into /usr/local/etc always get Access denied.
>>
>> I've tried swapping them and same behavior.  The files that would copy into /usr/local/bin now would not copy into
>> /usr/local/etc.
>>
>> I'm seeing this behavior on Windows 7 and Windows 2008R2 w/UAC.
>>
>> The installer prompts the user for elevated privileges to deal with UAC.
>>
>> Is there some underlying difference in the way that /usr/local/bin and /usr/local/etc are configured in Cygwin?
>
>
> it should be no difference.
> However you can check the Windows ACL with
>
> $ cd /usr/local
>
> /usr/local
> $ getfacl bin
> # file: bin
> # owner: marco
> # group: Administrators
> user::rwx
> group::r-x
> mask:rwx
> other:r-x
> default:user::rwx
> default:group::r-x
> default:other:r-x
>
> $ getfacl etc
> # file: etc
> # owner: marco
> # group: Administrators
> user::rwx
> group::r-x
> mask:rwx
> other:r-x
> default:user::rwx
> default:group::r-x
> default:other:r-x
>
> however, I will not be surprised if setup run by a MSI have additional
> limitation.
>
> Can you install the same "package" by setup alone to compare ?
>
>

I ran the acl checks and can find no difference between them which leads to this being yet another WiX/MSI installer
issue which doesn't surprise me.

Administrator AT WIN-SERVER /cygdrive/c/cygwin/usr/local
$ getfacl bin
# file: bin
# owner: Administrator
# group: Domain Users
user::rwx
group::r-x
mask:rwx
other:r-x
default:user::rwx
default:group::r-x
default:other:r-x


Administrator AT WIN-SERVER /cygdrive/c/cygwin/usr/local
$ getfacl etc
# file: etc
# owner: Administrator
# group: Domain Users
user::rwx
group::r-x
mask:rwx
other:r-x
default:user::rwx
default:group::r-x
default:other:r-x


Administrator AT WIN-SERVER /cygdrive/c/cygwin/usr/local
$ cacls bin
C:\cygwin\usr\local\bin SECRET\Administrator:F
                                      SECRET\Domain Users:R
                                      Everyone:R
                                      CREATOR OWNER:(OI)(CI)(IO)F
                                      CREATOR GROUP:(OI)(CI)(IO)R
                                      Everyone:(OI)(CI)(IO)R


Administrator AT WIN-SERVER /cygdrive/c/cygwin/usr/local
$ cacls etc
C:\cygwin\usr\local\etc SECRET\Administrator:F
                                      SECRET\Domain Users:R
                                      Everyone:R
                                      CREATOR OWNER:(OI)(CI)(IO)F
                                      CREATOR GROUP:(OI)(CI)(IO)R
                                      Everyone:(OI)(CI)(IO)R


Administrator AT WIN-SERVER /cygdrive/c/cygwin/usr/local
$ Icacls bin
bin SECRET\Administrator:(F)
    SECRET\Domain Users:(RX)
    Everyone:(RX)
    CREATOR OWNER:(OI)(CI)(IO)(F)
    CREATOR GROUP:(OI)(CI)(IO)(RX)
    Everyone:(OI)(CI)(IO)(RX)

Successfully processed 1 files; Failed processing 0 files

Administrator AT WIN-SERVER /cygdrive/c/cygwin/usr/local
$ Icacls etc
etc SECRET\Administrator:(F)
    SECRET\Domain Users:(RX)
    Everyone:(RX)
    CREATOR OWNER:(OI)(CI)(IO)(F)
    CREATOR GROUP:(OI)(CI)(IO)(RX)
    Everyone:(OI)(CI)(IO)(RX)

Successfully processed 1 files; Failed processing 0 files


Thanks for your help.



--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -


  webmaster     delorie software   privacy  
  Copyright © 2019   by DJ Delorie     Updated Jul 2019