DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:reply-to:message-id:to:subject
	:in-reply-to:references:mime-version:content-type
	:content-transfer-encoding; q=dns; s=default; b=XFNMo01WOd5yO5B8
	JhAliwVMYSdRiUpbhQxEj9wY88XDj3r9R00rccRFyrRiyMGd9VoX4XvX9botfKeG
	40eLtpWUwk45NoaSPpDTVJI2wBjwQSQkYFY9pwuCf50EnsfFUwgL3q2WvxcBvJaE
	HRmISfAJyjS3Uy/S9LZqCUeWfyI=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
Date: Wed, 24 Jul 2013 17:34:06 +0400
From: Andrey Repin <anrdaemon@freemail.ru>
Reply-To: Andrey Repin <cygwin@cygwin.com>
Message-ID: <1358868658.20130724173406@mtu-net.ru>
To: Charles Wilson <cygwin@cwilson.fastmail.fm>, cygwin@cygwin.com
Subject: Re: setup-x86_64: postinstall errors: Package bash 1, Package a2ps 2 and xinit 134
In-Reply-To: <51EFD0EB.6030804@cwilson.fastmail.fm>
References: <CADex0xx+uY6Y8ngZ3tUsYr+KPi0t0+H+H7X-civ-iq0diuJfZw@mail.gmail.com> <51EE0951.90007@users.sourceforge.net> <51EEC7F2.5000402@cwilson.fastmail.fm> <20130723184615.GK9689@calimero.vinschen.de> <51EED4B4.7000908@cwilson.fastmail.fm> <20130723192342.GM9689@calimero.vinschen.de> <51EFD0EB.6030804@cwilson.fastmail.fm>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

Greetings, Charles Wilson!

>>> But even if /bin/bash is elevated, it doesn't follow that any of the
>>> tools launched within a script -- via cygwin's fork/exec method --
>>> ALSO retain that elevation.
>>>
>>> Does it?
>>
>> Yes, it does.  CreateProcess propagates its own user token untouched.
>>
>> Weird question.  Did you ever start an elevated shell and lost your
>> admin permissions in a child process?  If that would occur, nothing
>> would work right in an admin shell.  Even the `id' call would not show
>> the admins group in your supplementary group list.

> OK. At one point I thought there was an issue with propagating 
> elevation, but I guess not.

> So...is it possible to launch setup*.exe in an UNelevated context

Yes, is you rename it to something less apparent. People suggested
"getcygwin.exe" earlier.

> (somehow bypassing the UAC detection, even though we don't ship a
> manifest)?  Then, if the user selects 'Install for All Users' you would 
> see this problem.


--
WBR,
Andrey Repin (anrdaemon@freemail.ru) 24.07.2013, <17:33>

Sorry for my terrible english...


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple