X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:content-type:mime-version:subject:from
	:in-reply-to:date:content-transfer-encoding:message-id
	:references:to; q=dns; s=default; b=bpU0VekS35CgDZbYjgkRuEgw9WDj
	u8SWmWZLVba4XahyuzDaF+RvOZ7RdHDDbaqIVIuifavItdMWfRad+U12WczgaVTU
	dU1s/LoY60+nVELw3NgLPlgifko3Z+mGq2Q9TESI4jPzhIjryE/JqaimsPfS8dIp
	gMQrpkVtMTBRYXM=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:content-type:mime-version:subject:from
	:in-reply-to:date:content-transfer-encoding:message-id
	:references:to; s=default; bh=xAaUBQ0nI66Az5yqENnrICaKVzY=; b=wE
	99vKapmQZ9ZTJsq+S0K+6uaL+1DAll1V471VBw1c0OwzThBq/1mD2o0In9VpimE9
	3dGZxH4RCUJiqm+eS4GvyO3KnPHUITSSfGmtXifFRxhd3gFXOktZ+rHQ4N4k1wpb
	QdaEbhxHo5AwWfagVPK0VC//4dGnfwx0pCyPhHymo=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=-0.4 required=5.0 tests=AWL,BAYES_50,RP_MATCHES_RCVD autolearn=ham version=3.3.2
X-HELO:	etr-usa.com
Mime-Version:	1.0 (Mac OS X Mail 7.3 \(1878.6\))
Subject:	Re: /usr/local, /var and */tmp in c:\Users\Public
From:	Warren Young <warren AT etr-usa DOT com>
In-Reply-To:	<20141113093335.GI2782@calimero.vinschen.de>
Date:	Thu, 13 Nov 2014 14:09:55 -0700
Message-Id:	<40005E53-A327-4E4A-8C71-514E505F9FBC@etr-usa.com>
References:	<81578012-FD3F-4463-BC56-ADB092317DD4 AT etr-usa DOT com> <CABa6CEkRV=3FY6ZVGrdt--rH3PppwCJRD5poU0L2knv2k2ce_w AT mail DOT gmail DOT com> <25F385A9-3E2D-44FC-998F-D2672F67DFE4 AT etr-usa DOT com> <m40npq$vrq$1 AT ger DOT gmane DOT org> <ECD073FF-B78C-4D19-8DE1-5F4E390D2495 AT etr-usa DOT com> <20141113093335 DOT GI2782 AT calimero DOT vinschen DOT de>
To:	cygwin AT cygwin DOT com
X-MIME-Autoconverted:	from quoted-printable to 8bit by delorie.com id sADL9jXp018849

On Nov 13, 2014, at 2:33 AM, Corinna Vinschen <corinna-cygwin AT cygwin DOT com> wrote:

> On Nov 12 17:19, Warren Young wrote:
>> 
>> I’m not advocating that step so early, but maybe if this breakup does
>> happen, a few years later setup.exe can start applying some strong
>> ACLs to files it writes.
> 
> ??? What "strong" ACLs?

The ones that are not there right now. :)

Just to pick a random example:

$ ls -l /bin/ls.exe
-rwxrwxr-x 1 Warren None 116253 Oct 13 10:12 /bin/ls.exe

The same file’s permissions, from Windows’ perspective:

http://etr-usa.com/cygwin/ls-perms.png

So, just because I installed Cygwin with my regular user account, I get permission to rewrite ls.exe.  This is not a good thing, if our goal is to make Cygwin work like Linux while working *within* the Windows environment.  

IMHO, the way to meet both goals simultaneously is to put programs in c:\Program Files, and to give full-control perms to the local Administrator account in the SAM case, or possibly the domain one in the AD case.
--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -