X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:reply-to:message-id:to:subject
	:in-reply-to:references:mime-version:content-type
	:content-transfer-encoding; q=dns; s=default; b=eiJv5TPZLPQ1x4Nk
	HFWKtIy4/lHW2ScKmvqoKgXZufvUBtSzyFfxvs1rBQ5T+oD7v4HgIICav4eSlccj
	BJ1tX3pFGDdnDZNJSjk/51TUsVklWbAkSfCySoNMgWq4T3N6XUTacShYbHCaYNsQ
	/udtFUtMlLc9m2WIQt8o3H1BU2o=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:reply-to:message-id:to:subject
	:in-reply-to:references:mime-version:content-type
	:content-transfer-encoding; s=default; bh=AJwh9ApXmv8aBTb4HRq16i
	+t3X8=; b=Nd/CtPxJdQjtXh4bcN/eyhz5L/VRR4AAMRzAU8wHjOE9PGEHEUqJ7E
	ZA1bhJzc8TtcwjoHBBB2r5J+Mz2HIqVuBUQD3Ta/mq4BIm5x0pzCnDmYUzTLYoLP
	lpGOKpkCeGlkpG46O8KJXD5ZPtre3vRypBLsafuyOuCOQOtNwsyq0=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-3.3 required=5.0 tests=AWL,BAYES_50,FREEMAIL_FROM,KAM_THEBAT,MIME_BASE64_BLANKS,SPF_SOFTFAIL autolearn=no version=3.3.2
X-HELO: smtp.ht-systems.ru
Date: Fri, 14 Nov 2014 02:10:59 +0300
From: Andrey Repin <anrdaemon AT yandex DOT ru>
Reply-To: cygwin AT cygwin DOT com
Message-ID: <5410625057.20141114021059@yandex.ru>
To: Corinna Vinschen <cygwin AT cygwin DOT com>, cygwin AT cygwin DOT com
Subject: Re: /usr/local, /var and */tmp in c:\Users\Public
In-Reply-To: <20141113221706.GX2782@calimero.vinschen.de>
References: <81578012-FD3F-4463-BC56-ADB092317DD4 AT etr-usa DOT com>   <CABa6CEkRV=3FY6ZVGrdt--rH3PppwCJRD5poU0L2knv2k2ce_w AT mail DOT gmail DOT com>  <25F385A9-3E2D-44FC-998F-D2672F67DFE4 AT etr-usa DOT com> <m40npq$vrq$1 AT ger DOT gmane DOT org>  <ECD073FF-B78C-4D19-8DE1-5F4E390D2495 AT etr-usa DOT com>  <20141113093335 DOT GI2782 AT calimero DOT vinschen DOT de>  <40005E53-A327-4E4A-8C71-514E505F9FBC AT etr-usa DOT com>  <20141113213005 DOT GV2782 AT calimero DOT vinschen DOT de>  <B19F8A26-44EB-46E6-A1DE-EC4E32274A35 AT etr-usa DOT com>  <20141113221706 DOT GX2782 AT calimero DOT vinschen DOT de>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
X-IsSubscribed: yes
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from base64 to 8bit by delorie.com id sADNKNbg027928

Greetings, Corinna Vinschen!

>> > However, the *other* idea is that if you install with an elevated Setup,
>> > your account is an admin account anyway.  Ideally when you install
>> > Cygwin for multiple users, you're using an account you're not using for
>> > daily usage.
>> 
>> Couldn’t the Cygwin non-user files be owned by SYSTEM instead of the installing user?

> In a corporate model this might make sense, but for the home user?  I'm
> not so sure about SYSTEM, though.  Administrator/Administrators sounds
> right to me.  SYSTEM?

NT SERVICE\TrustedInstaller >.<
At least that's what many of the apps installed with.

@ /c/Program Files/DVD Maker
$ icacls DVDMaker.exe | iconv -f cp866
DVDMaker.exe NT SERVICE\TrustedInstaller:(F)
             BUILTIN\Administrators:(RX)
             NT AUTHORITY\SYSTEM:(RX)
             BUILTIN\Users:(RX)

Not all, though.

@ /c/Program Files/Opera
$ icacls.exe opera.exe | iconv -f cp866
opera.exe NT AUTHORITY\SYSTEM:(I)(F)
          BUILTIN\Administrators:(I)(F)
          BUILTIN\Users:(I)(RX)

> Hmm.  As I said, at one point back in the early
> 1.7 days setup did something like that, but we got complaints.  I don't
> remember the details.  But if we do something like that again, it should
> be configurable.  Maybe the "Just Me"/"All users" choice is sufficient
> if explained sufficiently in the GUI?

It's interested to know, what these complaints were about exactly. I was away
from the list, when transition to 1.7 occured.

> Also, who's going to do that?  The coding part, I mean.  Lots of what's
> required is already in setup, but I can't write it often enough (it's
> an obsession probably): I would be very glad for developers not shy
> making their hands dirty.


--
WBR,
Andrey Repin (anrdaemon AT yandex DOT ru) 14.11.2014, <02:02>

Sorry for my terrible english...