DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:reply-to:message-id:to:subject
	:in-reply-to:references:mime-version:content-type
	:content-transfer-encoding; q=dns; s=default; b=eiJv5TPZLPQ1x4Nk
	HFWKtIy4/lHW2ScKmvqoKgXZufvUBtSzyFfxvs1rBQ5T+oD7v4HgIICav4eSlccj
	BJ1tX3pFGDdnDZNJSjk/51TUsVklWbAkSfCySoNMgWq4T3N6XUTacShYbHCaYNsQ
	/udtFUtMlLc9m2WIQt8o3H1BU2o=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
Date: Fri, 14 Nov 2014 02:10:59 +0300
From: Andrey Repin <anrdaemon@yandex.ru>
Reply-To: cygwin@cygwin.com
Message-ID: <5410625057.20141114021059@yandex.ru>
To: Corinna Vinschen <cygwin@cygwin.com>, cygwin@cygwin.com
Subject: Re: /usr/local, /var and */tmp in c:\Users\Public
In-Reply-To: <20141113221706.GX2782@calimero.vinschen.de>
References: <81578012-FD3F-4463-BC56-ADB092317DD4@etr-usa.com>   <CABa6CEkRV=3FY6ZVGrdt--rH3PppwCJRD5poU0L2knv2k2ce_w@mail.gmail.com>  <25F385A9-3E2D-44FC-998F-D2672F67DFE4@etr-usa.com> <m40npq$vrq$1@ger.gmane.org>  <ECD073FF-B78C-4D19-8DE1-5F4E390D2495@etr-usa.com>  <20141113093335.GI2782@calimero.vinschen.de>  <40005E53-A327-4E4A-8C71-514E505F9FBC@etr-usa.com>  <20141113213005.GV2782@calimero.vinschen.de>  <B19F8A26-44EB-46E6-A1DE-EC4E32274A35@etr-usa.com>  <20141113221706.GX2782@calimero.vinschen.de>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit

Greetings, Corinna Vinschen!

>> > However, the *other* idea is that if you install with an elevated Setup,
>> > your account is an admin account anyway.  Ideally when you install
>> > Cygwin for multiple users, you're using an account you're not using for
>> > daily usage.
>> 
>> Couldn’t the Cygwin non-user files be owned by SYSTEM instead of the installing user?

> In a corporate model this might make sense, but for the home user?  I'm
> not so sure about SYSTEM, though.  Administrator/Administrators sounds
> right to me.  SYSTEM?

NT SERVICE\TrustedInstaller >.<
At least that's what many of the apps installed with.

@ /c/Program Files/DVD Maker
$ icacls DVDMaker.exe | iconv -f cp866
DVDMaker.exe NT SERVICE\TrustedInstaller:(F)
             BUILTIN\Administrators:(RX)
             NT AUTHORITY\SYSTEM:(RX)
             BUILTIN\Users:(RX)

Not all, though.

@ /c/Program Files/Opera
$ icacls.exe opera.exe | iconv -f cp866
opera.exe NT AUTHORITY\SYSTEM:(I)(F)
          BUILTIN\Administrators:(I)(F)
          BUILTIN\Users:(I)(RX)

> Hmm.  As I said, at one point back in the early
> 1.7 days setup did something like that, but we got complaints.  I don't
> remember the details.  But if we do something like that again, it should
> be configurable.  Maybe the "Just Me"/"All users" choice is sufficient
> if explained sufficiently in the GUI?

It's interested to know, what these complaints were about exactly. I was away
from the list, when transition to 1.7 occured.

> Also, who's going to do that?  The coding part, I mean.  Lots of what's
> required is already in setup, but I can't write it often enough (it's
> an obsession probably): I would be very glad for developers not shy
> making their hands dirty.


--
WBR,
Andrey Repin (anrdaemon@yandex.ru) 14.11.2014, <02:02>

Sorry for my terrible english...