X-Recipient: archive-cygwin AT delorie DOT com X-SWARE-Spam-Status: No, hits=-2.7 required=5.0 tests=BAYES_00,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,FREEMAIL_FROM,RCVD_IN_DNSWL_LOW X-Spam-Check-By: sourceware.org Received-SPF: pass (google.com: domain of d DOT sastre DOT medina AT gmail DOT com designates 10.216.144.138 as permitted sender) client-ip=10.216.144.138; Authentication-Results: mr.google.com; spf=pass (google.com: domain of d DOT sastre DOT medina AT gmail DOT com designates 10.216.144.138 as permitted sender) smtp.mail=d DOT sastre DOT medina AT gmail DOT com; dkim=pass header.i=d DOT sastre DOT medina AT gmail DOT com Date: Tue, 28 Feb 2012 21:39:56 +0100 From: David Sastre Medina To: cygwin AT cygwin DOT com Subject: Re: 1.7.10/1.7.11: .Net programs started from a cygwin console may fail. Message-ID: <20120228203956.GD6761@jethro.local.lan> References: <4F4BA00E DOT 2020806 AT prover DOT com> <20120228125601 DOT GC23440 AT calimero DOT vinschen DOT de> <20120228141754 DOT GA6518 AT calimero DOT vinschen DOT de> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="MAH+hnPXVZWQ5cD/" Content-Disposition: inline In-Reply-To: <20120228141754.GA6518@calimero.vinschen.de> User-Agent: Mutt/1.5.21 (2010-09-15) X-IsSubscribed: yes Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm Precedence: bulk List-Id: List-Unsubscribe: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com --MAH+hnPXVZWQ5cD/ Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Feb 28, 2012 at 03:17:54PM +0100, Corinna Vinschen wrote: > On Feb 28 08:51, Jon Clugston wrote: > > Just a guess, but it does look suspiciously like the name of an > > environment variable. Wasn't there some discussion lately about > > differing case environment variables ("tmp" as opposed to "TMP")? >=20 > Dead on, thanks! The definitions of tmp and temp in /etc/profile result > in a double definition of the %TMP% and %TEMP% dos variables from the > .Net applications POV and it's too dumb to handle that gracefully. >=20 > So the solution is, either we drop the tmp and temp definitions in > /etc/profile, or old .net apps should be started only after calling > `unset tmp temp' in bash. >=20 > Btw., tmp and temp are not preserved this way in tcsh's profile scripts. > So I'm wondering why we do it in /etc/profile. Can somebody give me a > management summary? A while back (about the 3.x -> 4.x changes in base-files), it was agreed to unset both TMP and TEMP and set them to /tmp. A user concerned about the security of files owned by windows native=20 applications started within cygwin, reported that those files were created with 777 perms under /tmp, making it trivial for other users to read/copy temps files easily. The solution proposed, which I included in 4.0-7, was to set temporary dirs as they are now in /etc/profile. With regards to tcsh, and apart from /etc/profile.d/*.csh, it doesn't use any startup file in base-files, as you know it has its own set of=20 /etc/csh.login /etc/csh.cshrc and a couple of files under /etc/profile.d (as of 6.18.00-3). So it is not easy for me to propagate this to tcsh. Regardless, it's probab= ly=20 my fault not having publicised enough that change to give tcsh, and probably zsh and mksh (both can use /etc/their-own-startup-profile) mantainers at least the chance to include it or complain. If this setting is to be dropped, we'll go back to creating unsecure files in /tmp under the described scenario (unless some other solution is impleme= nted). --=20 Huella de clave primaria: AD8F BDC0 5A2C FD5F A179 60E7 F79B AB04 5299 EC56 --MAH+hnPXVZWQ5cD/ Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iF4EAREIAAYFAk9NO5wACgkQ95urBFKZ7Fb1dwEAg3uVzJuI70+C1mHuFGTmxAis dwHz4ZG9tLKSpg8h5y8A/iRGgkSeD7S5z03P9ZvbO3jO8+N1lS6btNDhOhuw1ljV =7zYq -----END PGP SIGNATURE----- --MAH+hnPXVZWQ5cD/--