Mailing-List:	contact cygwin-developers-help AT cygwin DOT com; run by ezmlm
List-Subscribe:	<mailto:cygwin-developers-subscribe AT cygwin DOT com>
List-Archive:	<http://sources.redhat.com/ml/cygwin-developers/>
List-Post:	<mailto:cygwin-developers AT cygwin DOT com>
List-Help:	<mailto:cygwin-developers-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender:	cygwin-developers-owner AT cygwin DOT com
Delivered-To:	mailing list cygwin-developers AT cygwin DOT com
Subject:	Re: Avoiding /etc/passwd and /etc/group scans
From:	Robert Collins <rbcollins AT cygwin DOT com>
To:	cygwin-developers AT cygwin DOT com
In-Reply-To:	<20021022211930.GF6429@redhat.com>
References:	<3DB416E7 DOT 99E22851 AT ieee DOT org>
	<20021021162246 DOT GC15828 AT redhat DOT com> <20021022162432 DOT GF514 AT redhat DOT com>
	<3DB58CBD DOT 87B2BDD8 AT ieee DOT org> <20021022181947 DOT GA4729 AT redhat DOT com>
	<3DB5A076 DOT ABAFF076 AT ieee DOT org> <20021022191217 DOT GD4828 AT redhat DOT com>
	<3DB5AB53 DOT B434ED90 AT ieee DOT org> <20021022202004 DOT GA6995 AT redhat DOT com>
	<3DB5BA56 DOT A76B6463 AT ieee DOT org> <20021022211930 DOT GF6429 AT redhat DOT com>
Date:	23 Oct 2002 07:22:30 +1000
Message-Id:	<1035321750.1455.14.camel@lifelesswks>
Mime-Version:	1.0

--=-6hMTOXFhDLzHjWrMzFXU
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

On Wed, 2002-10-23 at 07:19, Christopher Faylor wrote:


> >- Do the modes depend on the value of ntsec when setup is run=20
> >  (e.g. inheriting from the directory)? =20
>=20
> Nope.  setup isn't a cygwin app, so...
> cgf

And because ntsec wasn't the default we couldn't set reasonable acls...

Here's a short term workaround, until we fix setup.exe.

Add a .bat file as a postinstall script that scans the cygwin tree and
sets executable rights to .exe and .dll files using the cacls command.

Rob

--=20
---
GPG key available at: http://users.bigpond.net.au/robertc/keys.txt.
---

--=-6hMTOXFhDLzHjWrMzFXU
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQA9tcGWI5+kQ8LJcoIRAmhaAKDRNiCXldr5fHRaTKt2cjqwqlrP4ACfSXwY
nyBaDoCl9zFIjD3ydVLx9lg=
=K1Sd
-----END PGP SIGNATURE-----

--=-6hMTOXFhDLzHjWrMzFXU--

- Raw text -