delorie.com/archives/browse.cgi   search  
Mail Archives: cygwin/2017/07/11/12:34:19

X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
:list-unsubscribe:list-subscribe:list-archive:list-post
:list-help:sender:reply-to:subject:references:to:from:message-id
:date:mime-version:in-reply-to:content-type
:content-transfer-encoding; q=dns; s=default; b=bSw1pk+5PBae42kF
2SPbMz52vOkYZVdWL++MkYrhgrWbg3OQu9YYTOBTHQcWC82wuMbQUtOarLx6OIKY
iNLzWvCjZSoslhi33EQQCtPcgxwrd89a/d5dA+a95NLeQ4RA/tS/jtVsF1oO0fZv
zo2QCAmsq3SNtZpnXXXMjhnB4Wc=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
:list-unsubscribe:list-subscribe:list-archive:list-post
:list-help:sender:reply-to:subject:references:to:from:message-id
:date:mime-version:in-reply-to:content-type
:content-transfer-encoding; s=default; bh=XcIV17IdSv+mXCy7eTy3or
uc5cI=; b=av4W7roCfu/njPbHIsfnA6kbg+uF/fEfFeee/lcXayN04o6je9uXUO
hLZygD1W+7fLkqOB26QmAzcDwq09GUeAaAhup8IY9j6pIHzO6cCbG0TfMjWZiWHt
yv+kylCPaTJ6p6mn8SFHW6YDfhIF2zs1YbCEHIyjcYxCXVYdmeEek=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-0.9 required=5.0 tests=BAYES_00,KAM_LAZY_DOMAIN_SECURITY,RP_MATCHES_RCVD autolearn=no version=3.3.2 spammy=crucial, H*RU:sk:mailsrv, HX-HELO:sk:mailsrv, H*r:sk:mailsrv
X-HELO: mailsrv.cs.umass.edu
Reply-To: moss AT cs DOT umass DOT edu
Subject: Re: Request to the git maintainer
References: <b5a70575-b81b-12c1-aad3-b100dd7acaa0 AT cs DOT umass DOT edu> <87a84cxcos DOT fsf AT Rainer DOT invalid> <64cc57cf-09c7-6225-963f-9adacb7d03af AT cs DOT umass DOT edu> <5b9b894856c27a28ce349b3689fe8751 AT mail DOT kylheku DOT com> <aa3bdabb-5e98-ada9-f033-15b675dee069 AT cs DOT umass DOT edu> <5058c577-3875-2d2f-950a-04ef54172c8d AT SystematicSw DOT ab DOT ca> <fa6767b7-5457-e918-9600-145acc2268db AT cs DOT umass DOT edu> <d118dffc-5043-6c3a-96c5-3b8b2d44739d AT SystematicSw DOT ab DOT ca> <9c43f004-435f-ae48-4bba-56cecaa9ea46 AT cs DOT umass DOT edu>
To: cygwin AT cygwin DOT com
From: Eliot Moss <moss AT cs DOT umass DOT edu>
Message-ID: <d3aa033f-c6f1-c1d9-e5fd-d873579196d3@cs.umass.edu>
Date: Tue, 11 Jul 2017 12:33:55 -0400
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: <9c43f004-435f-ae48-4bba-56cecaa9ea46@cs.umass.edu>
X-IsSubscribed: yes

On 7/11/2017 8:34 AM, Eliot Moss wrote:
> On 7/10/2017 10:33 PM, Brian Inglis wrote:
>> On 2017-07-10 20:00, Eliot Moss wrote:
>>>> Backup processes should run with SeBackupPrivilege.
>>>
>>> Reasonable.  CrashPlan runs using SYSTEM access.  I
>>> will try adding SYSTEM to the BackupOperators group,
>>> which presumably has SeBackupPrivilege (and
>>> SeRestorePrivilege).  I am not sure how else to approach
>>> granting suitable privilege to this program.
>>
>> Normally (a) backup/restore account(s) with backup/restore GPOs.
>> Failing that, registry tweaks, which should be set up by your backup package
>> installer.
>> Review
>> https://support.crashplan.com/Troubleshooting/Unable_To_Back_Up_Files_Windows
>
> Thank you, Brian - I was aware of that page.  It says that the SYSTEM user
> needs access to the files.  I have normally set up so that my cygwin tree
> is granted SYSTEM read access all the way down.  /usr/share/locale does
> not seem to obey that, which I will inspect more deeply.  Meanwhile, I am
> still seeing if adding SYSTEM to BackupOperators is helpful ...

The answer to the latter question is no, so, I applied these changes to
my /usr hierarchy (32 and 64 bit):

Directories:
   setfacl -m group:SYSTEM:r-x
   setfacl -m default:group:SYSTEM:r-x
   chgrp Cygwin
   chmod g+s

Files:
   setfacl -m group:SYSTEM:r-x
   chgrp Cygwin

The chgrp and chmod are not the more necessary parts, but they tend to
help Cygwin tools run ore smoothly.  (Cygwin is the name of a group I
set up for Cygwin things; of course I am a member of that group.)  The
setfacl SYSTEM settings are what is crucial for CrashPlan.

Meanwhile, I still claim that 600 mode for .mo files is strange :-) ...

Regards - EM

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -


  webmaster     delorie software   privacy  
  Copyright © 2019   by DJ Delorie     Updated Jul 2019