X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:content-type:mime-version:subject:from
	:in-reply-to:date:content-transfer-encoding:message-id
	:references:to; q=dns; s=default; b=bpU0VekS35CgDZbYjgkRuEgw9WDj
	u8SWmWZLVba4XahyuzDaF+RvOZ7RdHDDbaqIVIuifavItdMWfRad+U12WczgaVTU
	dU1s/LoY60+nVELw3NgLPlgifko3Z+mGq2Q9TESI4jPzhIjryE/JqaimsPfS8dIp
	gMQrpkVtMTBRYXM=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:content-type:mime-version:subject:from
	:in-reply-to:date:content-transfer-encoding:message-id
	:references:to; s=default; bh=xAaUBQ0nI66Az5yqENnrICaKVzY=; b=wE
	99vKapmQZ9ZTJsq+S0K+6uaL+1DAll1V471VBw1c0OwzThBq/1mD2o0In9VpimE9
	3dGZxH4RCUJiqm+eS4GvyO3KnPHUITSSfGmtXifFRxhd3gFXOktZ+rHQ4N4k1wpb
	QdaEbhxHo5AwWfagVPK0VC//4dGnfwx0pCyPhHymo=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-0.4 required=5.0 tests=AWL,BAYES_50,RP_MATCHES_RCVD autolearn=ham version=3.3.2
X-HELO: etr-usa.com
Content-Type: text/plain; charset=windows-1252
Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\))
Subject: Re: /usr/local, /var and */tmp in c:\Users\Public
From: Warren Young <warren AT etr-usa DOT com>
In-Reply-To: <20141113093335.GI2782@calimero.vinschen.de>
Date: Thu, 13 Nov 2014 14:09:55 -0700
Message-Id: <40005E53-A327-4E4A-8C71-514E505F9FBC@etr-usa.com>
References: <81578012-FD3F-4463-BC56-ADB092317DD4 AT etr-usa DOT com> <CABa6CEkRV=3FY6ZVGrdt--rH3PppwCJRD5poU0L2knv2k2ce_w AT mail DOT gmail DOT com> <25F385A9-3E2D-44FC-998F-D2672F67DFE4 AT etr-usa DOT com> <m40npq$vrq$1 AT ger DOT gmane DOT org> <ECD073FF-B78C-4D19-8DE1-5F4E390D2495 AT etr-usa DOT com> <20141113093335 DOT GI2782 AT calimero DOT vinschen DOT de>
To: cygwin AT cygwin DOT com
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by delorie.com id sADL9jXp018849

On Nov 13, 2014, at 2:33 AM, Corinna Vinschen <corinna-cygwin AT cygwin DOT com> wrote:

> On Nov 12 17:19, Warren Young wrote:
>> 
>> I’m not advocating that step so early, but maybe if this breakup does
>> happen, a few years later setup.exe can start applying some strong
>> ACLs to files it writes.
> 
> ??? What "strong" ACLs?

The ones that are not there right now. :)

Just to pick a random example:

$ ls -l /bin/ls.exe
-rwxrwxr-x 1 Warren None 116253 Oct 13 10:12 /bin/ls.exe

The same file’s permissions, from Windows’ perspective:

http://etr-usa.com/cygwin/ls-perms.png

So, just because I installed Cygwin with my regular user account, I get permission to rewrite ls.exe.  This is not a good thing, if our goal is to make Cygwin work like Linux while working *within* the Windows environment.  

IMHO, the way to meet both goals simultaneously is to put programs in c:\Program Files, and to give full-control perms to the local Administrator account in the SAM case, or possibly the domain one in the AD case.
--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple