DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=dzd4rAPYYPqd7WIgZ2RlCGcl0JEHOiowVRQ0gr6pu6/KJilCcfKI6
	kbEcED+yS2UceJK0r8XwIW+ra57k2CL7PS0FwRRbWQ5cPreSsdW8tacW7XzRjd0A
	XRfN01DSp2TAfEoFI945MTX2IgGv2lEFs4H1H266XW3uFk0koefV3U=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
Date: Wed, 24 Jul 2013 15:22:39 +0200
From: Corinna Vinschen <corinna-cygwin@cygwin.com>
To: cygwin@cygwin.com
Subject: Re: setup-x86_64: postinstall errors: Package bash 1, Package a2ps 2 and xinit 134
Message-ID: <20130724132239.GY9689@calimero.vinschen.de>
Reply-To: cygwin@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
References: <CADex0xx+uY6Y8ngZ3tUsYr+KPi0t0+H+H7X-civ-iq0diuJfZw@mail.gmail.com> <51EE0951.90007@users.sourceforge.net> <51EEC7F2.5000402@cwilson.fastmail.fm> <20130723184615.GK9689@calimero.vinschen.de> <51EED4B4.7000908@cwilson.fastmail.fm> <20130723192342.GM9689@calimero.vinschen.de> <51EFD0EB.6030804@cwilson.fastmail.fm>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
In-Reply-To: <51EFD0EB.6030804@cwilson.fastmail.fm>
User-Agent: Mutt/1.5.21 (2010-09-15)

On Jul 24 09:04, Charles Wilson wrote:
> On 7/23/2013 3:23 PM, Corinna Vinschen wrote:
> >On Jul 23 15:08, Charles Wilson wrote:
> >>But even if /bin/bash is elevated, it doesn't follow that any of the
> >>tools launched within a script -- via cygwin's fork/exec method --
> >>ALSO retain that elevation.
> >>
> >>Does it?
> >
> >Yes, it does.  CreateProcess propagates its own user token untouched.
> >
> >Weird question.  Did you ever start an elevated shell and lost your
> >admin permissions in a child process?  If that would occur, nothing
> >would work right in an admin shell.  Even the `id' call would not show
> >the admins group in your supplementary group list.
> 
> OK. At one point I thought there was an issue with propagating
> elevation, but I guess not.
> 
> So...is it possible to launch setup*.exe in an UNelevated context
> (somehow bypassing the UAC detection, even though we don't ship a
> manifest)?  Then, if the user selects 'Install for All Users' you
> would see this problem.

Yes.  The only thing we could do about that, would be to change
the manifest to start the 32 bit version always as admin, just as
the 64 bit setup.

On second thought, I wonder if we should get rid of the "All users"/
"Just me" selection entirely.


Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple