DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:date:from:reply-to:mime-version:to
	:subject:references:in-reply-to:content-type
	:content-transfer-encoding; q=dns; s=default; b=hrkwTYuZa62Zz+of
	Hxk5b/ycQPQKHQtl/Kcp//UDP8+FjEJVQL/gqCPWJkRAF5WUed99jNGDvU7TUr+b
	Iq+DV7/zY7Yc2uTb7PHEIKEa4aaO7wd+FZqYiPafsXAPlQj+asuFfahK0lIfXyMw
	cKpaDBr/E1jATzf85tnnseY+Nzo=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Message-id: <52CA1D3D.4010903@cygwin.com>
Date: Sun, 05 Jan 2014 22:04:29 -0500
From: "Larry Hall (Cygwin)" <reply-to-list-only-lh AT cygwin DOT com>
Reply-to: cygwin AT cygwin DOT com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.2.0
MIME-version: 1.0
To: cygwin AT cygwin DOT com
Subject: Re: Cygwin installation scope
References: <52C98CE5 DOT 3050703 AT verizon DOT net>
In-reply-to: <52C98CE5.3050703@verizon.net>
Content-type: text/plain; charset=ISO-8859-1; format=flowed
Content-transfer-encoding: 7bit

On 1/5/2014 11:48 AM, Gerry Reno wrote:
> Is there a way to install Cygwin such that it would only be accessible
> to  Users within a specific Windows Group?
>
> Right now you either get it just for the installing user or for All
> Users.   We would like access to be limited to a Group.

setup*.exe's option for current/all users has more to do with setting up
the services to permit changing the user context.  It's not meant as a
feature to implement some kind of security.  In other words, setup*.exe
does not support limiting access to particular users.

> I could restrict permissions on C:\cygwin but will that interfere with
> running Setup if we want to update packages?

It shouldn't so long as individuals that run setup*.exe have access to
the installation location.  Using Windows security is really the only
way to enforcing the kind of security I believe you're looking for here.

> And then what about the desktop and start menu icons in all the other
> User's desktops who aren't in the Group?

You'd need to remove these after the fact.

-- 
Larry

_____________________________________________________________________

A: Yes.
 > Q: Are you sure?
 >> A: Because it reverses the logical flow of conversation.
 >>> Q: Why is top posting annoying in email?

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple