delorie.com/archives/browse.cgi   search  
Mail Archives: cygwin/2014/11/15/13:05:50

X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
:list-unsubscribe:list-subscribe:list-archive:list-post
:list-help:sender:message-id:date:from:mime-version:to:subject
:references:in-reply-to:content-type; q=dns; s=default; b=YJnAtK
pNlvHld8rQGZeekfQArK+8bajbrljlOGrxyTt6ADZwSlgRugA1mOpF+WhFyAahTb
2/vkoArUJ/jlb0lcS7+9arj6i3jnEvKjhOW9o4kYjRNCzPDOkC3m/Yxfh6KU371e
3gfzu7eNuiW3AyY1OlIBggAmqxdFmHkw9OCQE=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
:list-unsubscribe:list-subscribe:list-archive:list-post
:list-help:sender:message-id:date:from:mime-version:to:subject
:references:in-reply-to:content-type; s=default; bh=mkS2M477iDRq
/epsK2+3roCKD5s=; b=yWo0GS17wTwq09r5MAjA94rGrtV9V4yHdDAqo3648SmR
NKMrjC16NnmRZnzRhJHGQmIUNsDlx2NlqmiqJauf6GaMXxDcDP1Pex7/8LY0E4uR
lLNXnCIaSm0FqPJyVceZ34z/2Vz7X3blWpsEmHNaNtHNokimfZZ8y/YaPaFxhlA=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-0.8 required=5.0 tests=AWL,BAYES_05 autolearn=ham version=3.3.2
X-HELO: mail.secure-endpoints.com
X-MDAV-Result: clean
X-MDAV-Processed: mail.secure-endpoints.com, Sat, 15 Nov 2014 13:05:29 -0500
X-Spam-Processed: mail.secure-endpoints.com, Sat, 15 Nov 2014 13:05:27 -0500
X-Spam-Report: * -0.0 NO_RELAYS Informational: message was not relayed via SMTP * -4.0 BAYES_00 BODY: Bayes spam probability is 0 to 1% * [score: 0.0000]
VBR-Info: md=secure-endpoints.com; mc=all; mv=vbr.emailcertification.org;
X-MDArrival-Date: Sat, 15 Nov 2014 13:05:27 -0500
X-Return-Path: prvs=1396919ca5=jaltman AT secure-endpoints DOT com
X-Envelope-From: jaltman AT secure-endpoints DOT com
X-MDaemon-Deliver-To: cygwin AT cygwin DOT com
Message-ID: <546795E3.4090806@secure-endpoints.com>
Date: Sat, 15 Nov 2014 13:05:23 -0500
From: Jeffrey Altman <jaltman AT secure-endpoints DOT com>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Thunderbird/31.2.0
MIME-Version: 1.0
To: cygwin AT cygwin DOT com
Subject: Re: /usr/local, /var and */tmp in c:\Users\Public
References: <81578012-FD3F-4463-BC56-ADB092317DD4 AT etr-usa DOT com> <CABa6CEkRV=3FY6ZVGrdt--rH3PppwCJRD5poU0L2knv2k2ce_w AT mail DOT gmail DOT com> <25F385A9-3E2D-44FC-998F-D2672F67DFE4 AT etr-usa DOT com> <m40npq$vrq$1 AT ger DOT gmane DOT org> <ECD073FF-B78C-4D19-8DE1-5F4E390D2495 AT etr-usa DOT com> <20141113093335 DOT GI2782 AT calimero DOT vinschen DOT de> <40005E53-A327-4E4A-8C71-514E505F9FBC AT etr-usa DOT com> <CAD8GWstJ+BkbkCJfE_48=b2cg0uzc8pkd1UnevP6-=3DHL+Buw AT mail DOT gmail DOT com>
In-Reply-To: <CAD8GWstJ+BkbkCJfE_48=b2cg0uzc8pkd1UnevP6-=3DHL+Buw@mail.gmail.com>
OpenPGP: id=92B69A04; url=http://pgp.mit.edu

--------------ms090809070402060003070007
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

On 11/15/2014 12:55 PM, Lee wrote:

>> So, just because I installed Cygwin with my regular user account,
>=20
> You're doing it wrong.  Install Cygwin using an admin account and
> regular user accounts are not allowed write access to system
> files/directories:

This feels really wrong to me.  If installing Cygwin under a non-admin
account results in a potential security vulnerability, then the
installer should be taking that into account.  Applications that behave
differently depending upon how they are installed should have in the
installer an option for

 * install for all users (requires administrator)

 * install for the current user

Where install for current user installs the application configured so
that the current user account (and not others) can use it.

Just my two cents.

Jeffrey Altman



--------------ms090809070402060003070007
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature

MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEH
AQAAoIINITCCBkIwggUqoAMCAQICEDirAC//rpa3Vv85Wvtd5xswDQYJKoZI
hvcNAQEFBQAwgcoxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5WZXJpU2lnbiwg
SW5jLjEfMB0GA1UECxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29yazE6MDgGA1UE
CxMxKGMpIDE5OTkgVmVyaVNpZ24sIEluYy4gLSBGb3IgYXV0aG9yaXplZCB1
c2Ugb25seTFFMEMGA1UEAxM8VmVyaVNpZ24gQ2xhc3MgMSBQdWJsaWMgUHJp
bWFyeSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEczMB4XDTExMDkwMTAw
MDAwMFoXDTIxMDgzMTIzNTk1OVowgaYxCzAJBgNVBAYTAlVTMR0wGwYDVQQK
ExRTeW1hbnRlYyBDb3Jwb3JhdGlvbjEfMB0GA1UECxMWU3ltYW50ZWMgVHJ1
c3QgTmV0d29yazEeMBwGA1UECxMVUGVyc29uYSBOb3QgVmFsaWRhdGVkMTcw
NQYDVQQDEy5TeW1hbnRlYyBDbGFzcyAxIEluZGl2aWR1YWwgU3Vic2NyaWJl
ciBDQSAtIEc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuwn
/R1j9DsdisHTHMjIgoa2uEqGkqqBXHLKMA0vnkEiVzAhJZCao/SsKsaIF4Zh
chN2LuwDyyebjyCAN+DkitpVplAP/LlcI2mJQqG6H6/vDvmkyQrx+DeyxtmS
Sq5937hEH5u6P4wG/tgjT0hRI2pghKjuJy9g35byGiqMPI8AzE/L+iCOvDX2
4fCatgXz/B0/xhR7DtryBeTTgwKmxWlwtKnkVunbHVz0pjbia7UeKi3cvrvu
OgSwMAitX2hsxr0GloiE5+apZC28ODC7iCbDZ2ZmtLR3+cChxw5y72bi5bnK
4POFdzWY3tQcsP5mceI4y258T0BV65fZqBge7QIDAQABo4ICRDCCAkAwOAYI
KwYBBQUHAQEELDAqMCgGCCsGAQUFBzABhhxodHRwOi8vcGtpLW9jc3AudmVy
aXNpZ24uY29tMBIGA1UdEwEB/wQIMAYBAf8CAQAwbAYDVR0gBGUwYzBhBgtg
hkgBhvhFAQcXATBSMCYGCCsGAQUFBwIBFhpodHRwOi8vd3d3LnN5bWF1dGgu
Y29tL2NwczAoBggrBgEFBQcCAjAcGhpodHRwOi8vd3d3LnN5bWF1dGguY29t
L3JwYTA0BgNVHR8ELTArMCmgJ6AlhiNodHRwOi8vY3JsLnZlcmlzaWduLmNv
bS9wY2ExLWczLmNybDAOBgNVHQ8BAf8EBAMCAQYwKQYDVR0RBCIwIKQeMBwx
GjAYBgNVBAMTEVZlcmlTaWduTVBLSS0yLTk3MB0GA1UdDgQWBBSt+cOTci21
uShh5KTXYNXECl4aATCB8QYDVR0jBIHpMIHmoYHQpIHNMIHKMQswCQYDVQQG
EwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xHzAdBgNVBAsTFlZlcmlT
aWduIFRydXN0IE5ldHdvcmsxOjA4BgNVBAsTMShjKSAxOTk5IFZlcmlTaWdu
LCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxRTBDBgNVBAMTPFZl
cmlTaWduIENsYXNzIDEgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBB
dXRob3JpdHkgLSBHM4IRAItbdVaEVIULAM+vOEjOsaQwDQYJKoZIhvcNAQEF
BQADggEBANaPwdqbiPKzbE0fWC+6AVFddMFG6MO4e5/WQPHv/zK6iWvADjRD
n6SZ5qTwXUgzYoWFYf4jiCKMYJsrnGVJlMSiOCRIpVylUEto6WIip5PomSJu
PVu7EEIOH0x1RzRWCY/4vYw881y70pZwVHBiTe/REL6dSCxe7IZrB4LwPeEl
Jygs4BZ2HrP95WKW0oo9Xyuu+1zCE7dlY8s0dkOf1oeZq26tlcEAP0Yngf81
3iMOQ9wUXzL5yinvwlIw9ZnduYH4OiUgjYJo8rkhhXRmBOGGORYy8i3WKqjJ
3tkAAk/jGCDFpYFWtpXe04Kt+HslvmR8LqC6cCz4+XXidE0HbYQwggbXMIIF
v6ADAgECAhA5oFEXaG88XscBgkTPSsu4MA0GCSqGSIb3DQEBBQUAMIGmMQsw
CQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAd
BgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxHjAcBgNVBAsTFVBlcnNv
bmEgTm90IFZhbGlkYXRlZDE3MDUGA1UEAxMuU3ltYW50ZWMgQ2xhc3MgMSBJ
bmRpdmlkdWFsIFN1YnNjcmliZXIgQ0EgLSBHNDAeFw0xMzEyMjMwMDAwMDBa
Fw0xNTAxMTYyMzU5NTlaMIHOMS4wLAYDVQQDDCVQZXJzb25hIE5vdCBWYWxp
ZGF0ZWQgLSAxMzU4Mjc1NTk5Njg2MSswKQYJKoZIhvcNAQkBFhxqYWx0bWFu
QHNlY3VyZS1lbmRwb2ludHMuY29tMQ8wDQYDVQQLDAZTL01JTUUxHjAcBgNV
BAsMFVBlcnNvbmEgTm90IFZhbGlkYXRlZDEfMB0GA1UECwwWU3ltYW50ZWMg
VHJ1c3QgTmV0d29yazEdMBsGA1UECgwUU3ltYW50ZWMgQ29ycG9yYXRpb24w
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtcVgrUA+Zl527P0yx
xfkiLZzymUZLAwif9amX6c79OHd17CN5Hg3TIRXi0exjq/z/K2eftbSfj3Xa
tgllPtlmCktqi4daJTVLifx5G7qbcYjQgKpex/8FA3gfvJJNgMef5OwOTE1H
qMJsp5CAquFjw/ReiXQqduou1nHhUhX1AXBpaQmYDOQZwrTD41yT7qm22N67
vV0viWG9x/1RdFqqtIOIyKR+ojD3IN0wufESgy7hsWgmghh4jkrclmMIXuo+
AAtmJHzwzF4hCrSqdwiRXU4aghTjsmehtMT1nFfzDPylaclOp7IY4xeQm/q1
cbU3uEqxhy06sYeVbh6zfTDBAgMBAAGjggLVMIIC0TAMBgNVHRMBAf8EAjAA
MA4GA1UdDwEB/wQEAwIFoDAgBgNVHSUBAf8EFjAUBggrBgEFBQcDBAYIKwYB
BQUHAwIwHQYDVR0OBBYEFLNBzIZb/xB6K+oeDwfBVLaB3qbUMCcGA1UdEQQg
MB6BHGphbHRtYW5Ac2VjdXJlLWVuZHBvaW50cy5jb20wHwYDVR0jBBgwFoAU
rfnDk3IttbkoYeSk12DVxApeGgEwggErBggrBgEFBQcBAQSCAR0wggEZMIIB
FQYIKwYBBQUHMAKGggEHbGRhcDovL2RpcmVjdG9yeS52ZXJpc2lnbi5jb20v
Q04lMjAlM0QlMjBTeW1hbnRlYyUyMENsYXNzJTIwMSUyMEluZGl2aWR1YWwl
MjBTdWJzY3JpYmVyJTIwQ0ElMjAtJTIwRzQlMkMlMjBPVSUyMCUzRCUyMFBl
cnNvbmElMjBOb3QlMjBWYWxpZGF0ZWQlMkMlMjBPVSUyMCUzRCUyMFN5bWFu
dGVjJTIwVHJ1c3QlMjBOZXR3b3JrJTJDJTIwTyUyMCUzRCUyMFN5bWFudGVj
JTIwQ29ycG9yYXRpb24lMkMlMjBDJTIwJTNEJTIwVVM/Y0FDZXJ0aWZpY2F0
ZTtiaW5hcnkwXQYDVR0fBFYwVDBSoFCgToZMaHR0cDovL3BraS1jcmwuc3lt
YXV0aC5jb20vY2FfNTYxYzEwMzY5MGM5N2E2OTI0N2EwZWYwNzFhYzgxYWYv
TGF0ZXN0Q1JMLmNybDBsBgNVHSAEZTBjMGEGC2CGSAGG+EUBBxcBMFIwJgYI
KwYBBQUHAgEWGmh0dHA6Ly93d3cuc3ltYXV0aC5jb20vY3BzMCgGCCsGAQUF
BwICMBwaGmh0dHA6Ly93d3cuc3ltYXV0aC5jb20vcnBhMCoGCmCGSAGG+EUB
EAMEHDAaBhFghkgBhvhFARABAgIEAYazFxYFMTA5MjIwDQYJKoZIhvcNAQEF
BQADggEBAACPkJV5NIxzjKc+WveaoM8Uc86wX0yLBm1A33z4rLVXTWPi5kMI
J6kfE+dFWcMdyyOgZ2VcxIwneZ50LcITFv1VOfRkrX32vVChQqs8XGqerIo/
K3epyFEg01qHq/4byolXW6UOvmZb3oHhtHDGS94Vv6Fu6wV7irAdoM18cqzQ
sxU0nZDMnY5k0pKJHLTrsC/uKuoWGz8xLLyeayi37ZsXsbGdazqzVMIoLvFT
MjaFuoCetEbiFQZvnuHKwdbVYqyCY28Cl8DVRHrInZrz84xqFiGZNSfFRWOo
ugT47VRDA8SVy6pOtDaOmkxcYXlh5Ezo29FBOiA0+tF8qgMmq3QxggRSMIIE
TgIBATCBuzCBpjELMAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENv
cnBvcmF0aW9uMR8wHQYDVQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3JrMR4w
HAYDVQQLExVQZXJzb25hIE5vdCBWYWxpZGF0ZWQxNzA1BgNVBAMTLlN5bWFu
dGVjIENsYXNzIDEgSW5kaXZpZHVhbCBTdWJzY3JpYmVyIENBIC0gRzQCEDmg
URdobzxexwGCRM9Ky7gwCQYFKw4DAhoFAKCCAmswGAYJKoZIhvcNAQkDMQsG
CSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMTQxMTE1MTgwNTIzWjAjBgkq
hkiG9w0BCQQxFgQUMJWg93EYV+nb90zvT+mKgSemBnUwbAYJKoZIhvcNAQkP
MV8wXTALBglghkgBZQMEASowCwYJYIZIAWUDBAECMAoGCCqGSIb3DQMHMA4G
CCqGSIb3DQMCAgIAgDANBggqhkiG9w0DAgIBQDAHBgUrDgMCBzANBggqhkiG
9w0DAgIBKDCBzAYJKwYBBAGCNxAEMYG+MIG7MIGmMQswCQYDVQQGEwJVUzEd
MBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAdBgNVBAsTFlN5bWFu
dGVjIFRydXN0IE5ldHdvcmsxHjAcBgNVBAsTFVBlcnNvbmEgTm90IFZhbGlk
YXRlZDE3MDUGA1UEAxMuU3ltYW50ZWMgQ2xhc3MgMSBJbmRpdmlkdWFsIFN1
YnNjcmliZXIgQ0EgLSBHNAIQOaBRF2hvPF7HAYJEz0rLuDCBzgYLKoZIhvcN
AQkQAgsxgb6ggbswgaYxCzAJBgNVBAYTAlVTMR0wGwYDVQQKExRTeW1hbnRl
YyBDb3Jwb3JhdGlvbjEfMB0GA1UECxMWU3ltYW50ZWMgVHJ1c3QgTmV0d29y
azEeMBwGA1UECxMVUGVyc29uYSBOb3QgVmFsaWRhdGVkMTcwNQYDVQQDEy5T
eW1hbnRlYyBDbGFzcyAxIEluZGl2aWR1YWwgU3Vic2NyaWJlciBDQSAtIEc0
AhA5oFEXaG88XscBgkTPSsu4MA0GCSqGSIb3DQEBAQUABIIBAFwbaqyjE0dq
4M3LzRjyhG0QjzXm8khmdj2XJhla1CB9YzkmnXgdaxUmbZC+7CQex8S9+pxB
rWyIEOqDFHNh3KIhPZRJFdaUiv/QgqTD7Lu2PqguVa2l1B2yjQn359EP6bCd
o0hB139V0HNUnQazLCsu6qolPyomANMBjeysJWUUQ8Ms7zxHCXTyBN77/K2r
sGWqjA2ycEENN8/pdyHB9BjfMdzQfyks8cNnD/ZoSqNor57H/JOoRrZB/lCZ
dENVs7pvtvWYfiQGs7uqEEE0gcrQ2qzQNdT65TfvOCiC9n4ODwiXoQ98yxyb
ONYWIHqzA8cvWFuMybgGt5SB/qB0pIUAAAAAAAA=

--------------ms090809070402060003070007--

- Raw text -


  webmaster     delorie software   privacy  
  Copyright © 2019   by DJ Delorie     Updated Jul 2019