X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=VRs1ijFbCGU6ji4rP1AuemXzg/nEGsrTrJa7S/R++lq9YmstKGAP3
	/wQlz3AjxP391fgbgqqrf6bB+HXNnoIStoWi3Ay7b4yl3Ue4PdArZjjE7OPDk/yu
	bsJiFAiTRiaU/AJKpnRAMvp8oW0vesqwF6deeUdc+JF/gfdFlF8e/I=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	 bh=1Rz+dm11Gxxi8Bp154kOh7JrZ8w=; b=Qg6XRBomHFS8wbiRT5r42xnT3a1Z
	Mg5uzI8b2IUjPPjvFWPY7AUptshNxq7VKFUVRNfpM6z/wdvvgUn6bVQ0BF80c/GV
	/8HWtgZ5YU3iLC6hr3afBy6Kypo7/j7p3tbOQ4afLZSBvcHDU4+ZS1pjdOVcPHV0
	iJH6SiR6ewomS70=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-3.6 required=5.0 tests=AWL,BAYES_50,UNSUBSCRIBE_BODY autolearn=no version=3.3.2
X-HELO: calimero.vinschen.de
Date: Thu, 13 Nov 2014 10:33:35 +0100
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: /usr/local, /var and */tmp in c:\Users\Public
Message-ID: <20141113093335.GI2782@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <81578012-FD3F-4463-BC56-ADB092317DD4 AT etr-usa DOT com> <CABa6CEkRV=3FY6ZVGrdt--rH3PppwCJRD5poU0L2knv2k2ce_w AT mail DOT gmail DOT com> <25F385A9-3E2D-44FC-998F-D2672F67DFE4 AT etr-usa DOT com> <m40npq$vrq$1 AT ger DOT gmane DOT org> <ECD073FF-B78C-4D19-8DE1-5F4E390D2495 AT etr-usa DOT com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;	protocol="application/pgp-signature"; boundary="jOtImjXIA9XXnHrK"
Content-Disposition: inline
In-Reply-To: <ECD073FF-B78C-4D19-8DE1-5F4E390D2495@etr-usa.com>
User-Agent: Mutt/1.5.23 (2014-03-12)

--jOtImjXIA9XXnHrK
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Nov 12 17:19, Warren Young wrote:
> On Nov 12, 2014, at 3:43 PM, Andrew DeFaria <Andrew AT DeFaria DOT com>
> wrote:
>=20
> > On 11/12/2014 2:16 PM, Warren Young wrote:
> >>> What local changes/installations get lost?
> >>=20
> >> Currently, if you nuke a default installation into c:\cygwin, you
> >> lose /home, /etc, /var and /usr/local, all of which contain user
> >> files and/or local system configuration.
> >=20
> > Technically user files can exist anywhere in the file system
>=20
> All the more reason to move to a world where it=E2=80=99s possible to sta=
rt
> securing /usr/bin, /usr/lib, /usr/share=E2=80=A6 so that only setup.exe c=
an
> write to it.
>=20
> I=E2=80=99m not advocating that step so early, but maybe if this breakup =
does
> happen, a few years later setup.exe can start applying some strong
> ACLs to files it writes.

??? What "strong" ACLs?  Setup creates the files with standard POSIX
permissions.  Which permissions are too open from your POV?


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--jOtImjXIA9XXnHrK
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=V3ff
-----END PGP SIGNATURE-----

--jOtImjXIA9XXnHrK--