DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:date:from:mime-version:to:subject
	:references:in-reply-to:content-type:content-transfer-encoding;
	 q=dns; s=default; b=Xas7D/60C0u391nsm9D4UPUvYF/sEHNuJlOYuor3ac2
	1SM2bCm6BqwT9HdWakW9aBrrLJJWwZhx/vHRLKtq/eAptPOhxkesXeSttHXpDS1e
	Iy7kjnD8oryS/IDb0rq9PRi/qDxsBf9iYurt97cMe3vtMi0WlXqcQ4kcERoYISiA
	=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
Message-ID: <51EED4B4.7000908@cwilson.fastmail.fm>
Date: Tue, 23 Jul 2013 15:08:36 -0400
From: Charles Wilson <cygwin@cwilson.fastmail.fm>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20130620 Thunderbird/17.0.7
MIME-Version: 1.0
To: The Cygwin Mailing List <cygwin@cygwin.com>
Subject: Re: setup-x86_64: postinstall errors: Package bash 1, Package a2ps 2 and xinit 134
References: <CADex0xx+uY6Y8ngZ3tUsYr+KPi0t0+H+H7X-civ-iq0diuJfZw@mail.gmail.com> <51EE0951.90007@users.sourceforge.net> <51EEC7F2.5000402@cwilson.fastmail.fm> <20130723184615.GK9689@calimero.vinschen.de>
In-Reply-To: <20130723184615.GK9689@calimero.vinschen.de>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit

On 7/23/2013 2:46 PM, Corinna Vinschen wrote:
> On Jul 23 14:14, Charles Wilson wrote:
>>> I believe your report has to do with error handling when attempting
>>> to modify the All User's Desktop, when you don't actually retain the
>>> elevated permissions necessary to do so.

>> Is there are way for setup.exe to
>> delegate its elevated credentials down to /bin/bash, and thence to
>> mkshortcut.exe? Otherwise, even the *fix* for this bug will just
>> make it not hang or crash; it will still fail to modify the
>> all-users start menu/desktop.
>
> Setup does not give up any of it's permissions when starting the
> postinstall scripts via CreateProcess.  The scripts have the same
> permissions as setup itself, which makes a lot of sense if you think
> about it.  Missing permissions to change system dirs should only occur
> if setup has been started as non-admin, or if the UAC installer
> recognition has been switched off (affects only the 32 bit version).

But even if /bin/bash is elevated, it doesn't follow that any of the 
tools launched within a script -- via cygwin's fork/exec method -- ALSO 
retain that elevation.

Does it?

--
Chuck


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple