X-Spam-Check-By: sourceware.org
Message-ID: <4385CE09.D2DAB8AF@dessent.net>
Date: Thu, 24 Nov 2005 06:28:25 -0800
From: Brian Dessent <brian AT dessent DOT net>
MIME-Version: 1.0
To: cygwin AT cygwin DOT com
Subject: Re: Suggest cygrunsrv extension: --pidfile option (patch included)
References: <4380AB2E DOT 7010302 AT t-online DOT de> <20051121153016 DOT GI2999 AT calimero DOT vinschen DOT de> <438221C6 DOT 1080103 AT t-online DOT de> <20051122095442 DOT GL2999 AT calimero DOT vinschen DOT de> <4384E07F DOT 6000308 AT t-online DOT de> <20051124113107 DOT GC2999 AT calimero DOT vinschen DOT de> <1EfHhO-1i3eWO0 AT fwd33 DOT aul DOT t-online DOT de>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-IsSubscribed: yes
Reply-To: cygwin AT cygwin DOT com
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com

Christian Franke wrote:

> Unlike syslog, windows event log is intended to store only message
> parameters, not complete messages.
> The (probably localized) messages must be provided by such an "event
> message file" (the misleading MS-term;-), which is essentially an .exe
> or .dll containing (message id, string) pairs in a resource section.
> For Cygwin, this would be one trivial (0, "%1") pair.
> 
> Does such a file (and associated registry tool) exist for Cygwin?

It's trivial to add the RT_MESSAGETABLE resource to cygwin1.dll that
contains the single message "%1\r\n".  It's complicated by the fact that
windres doesn't have parsing support for messagetables, but you can just
specify the raw binary for something this trivial.  If you search the ML
archives someone posted the appropriate .rc bits a couple years ago.

The hard part is that for every "event source" you need to add keys:

HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\(name)\
   EventMessageFile = REG_SZ "c:\path\to\cygwin1.dll"
   TypesSupported = REG_DWORD 0x1f

where (name) is whatever the application passed to openlog()'s first
parameter.

This sucks because it means that to truly do this right, the code in
Cygwin's openlog() has got to add these keys every time it's called. 
But it can't just blindly overwrite whatever event source might exist
already because otherwise a malicious application that called e.g.
openlog("MsiInstaller", ...) would fubar the MSI event source.  So it's
got to check if the event source exists, decide if it's a Cygwin event
source, figure out if the DLL path is correct, and if not, put the
current cygwin DLL path in the key.

This is not insurmountable but it's kind of a pain.  I've been slowly
working on a patch that does all this, but it's not ready yet.  For the
time being I just add event sources manually and it works great.

Brian

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/