X-Spam-Check-By: sourceware.org
Message-ID: <458194CC.62EC7425@dessent.net>
Date: Thu, 14 Dec 2006 10:15:40 -0800
From: Brian Dessent <brian AT dessent DOT net>
X-Mailer: Mozilla 4.79 [en] (Windows NT 5.0; U)
MIME-Version: 1.0
To: cygwin AT cygwin DOT com
Subject: Re: Vista & coreutils (or any other package)
References: <20061214152631 DOT GK9829 AT calimero DOT vinschen DOT de> <45818407 DOT 981D73E7 AT dessent DOT net> <els2m3$7jr$1 AT sea DOT gmane DOT org>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-IsSubscribed: yes
Reply-To: cygwin AT cygwin DOT com
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com

Shankar Unni wrote:

> > The manifest route is pretty simple, you just create an .xml file, then
> > refer to it in a resource file, and then windres does the rest.
> 
> But in cases like this, we really *don't* want to run with elevated
> privileges - if I'm "install"ing to /tmp, I definitely don't want to
> raise my privileges needlessly and potentially set up a security risk
> somewhere. (Admittedly this is an unlikely scenario, but...)

I thought the idea here was that the manifest tells the system
explicitly "I am not an installer and I do not need to be run with
elevated privileges", i.e. treat it like a normal program.

> Perhaps if we did this (cygwin-specific hack) instead?
> 
> * Rename "install.exe" to "inst-all.exe" (or something that won't trip
> Vista's braindamage)
> * Supply a one-line "install" shell script to exec inst-all.
> 
> * And then, in turn, we could provide an option to "install" to hack
> other packages' installations of executions named "xxxinstallxxx.exe",
> etc., to use this subterfuge and create the script and renamed execute
> on the fly in the install location.

Oh god please no.  There is no need to punish non-Vista users (i.e. the
vast majority of users) with such hideous atrocities when Vista users
can simply disable the feature at the heart of the problem.

Brian

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/