X-Spam-Check-By: sourceware.org
To: cygwin AT cygwin DOT com
From: Shankar Unni <shankarunni AT netscape DOT net>
Subject:  Re: Vista & coreutils (or any other package)
Date:  Thu, 14 Dec 2006 09:46:44 -0800
Lines: 32
Message-ID: <els2m3$7jr$1@sea.gmane.org>
References:  <20061214152631 DOT GK9829 AT calimero DOT vinschen DOT de> <45818407 DOT 981D73E7 AT dessent DOT net>
Mime-Version:  1.0
Content-Type:  text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding:  7bit
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.8) Gecko/20061025 Thunderbird/1.5.0.8 Mnenhy/0.7.3.0
In-Reply-To: <45818407.981D73E7@dessent.net>
X-IsSubscribed: yes
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Precedence: bulk
List-Id: <cygwin.cygwin.com>
List-Unsubscribe: <mailto:cygwin-unsubscribe-archive-cygwin=delorie DOT com AT cygwin DOT com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com

Brian Dessent wrote:

> The manifest route is pretty simple, you just create an .xml file, then
> refer to it in a resource file, and then windres does the rest.  

But in cases like this, we really *don't* want to run with elevated 
privileges - if I'm "install"ing to /tmp, I definitely don't want to 
raise my privileges needlessly and potentially set up a security risk 
somewhere. (Admittedly this is an unlikely scenario, but...)

Also, you want an *unprivileged* user to be able to run install to an 
unprivileged location, and such a manifest won't help (because that user 
won't ever be able to raise their privileges without knowing an 
administrator password).

Perhaps if we did this (cygwin-specific hack) instead?

* Rename "install.exe" to "inst-all.exe" (or something that won't trip 
Vista's braindamage)
* Supply a one-line "install" shell script to exec inst-all.

* And then, in turn, we could provide an option to "install" to hack 
other packages' installations of executions named "xxxinstallxxx.exe", 
etc., to use this subterfuge and create the script and renamed execute 
on the fly in the install location.

(I.e. when you run

   /usr/bin/install [--maybe-some-option] myupdate /usr/bin

"install" would actually copy myupdate.exe to /usr/bin/myup-date.exe, 
and create a /usr/bin/myupdate shell script to invoke myup-date.)


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/