X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:in-reply-to:references:date
	:message-id:subject:from:to:content-type; q=dns; s=default; b=mt
	2S9CVumZt6iZL3nu31TfwwMoicHWJh9XXm+vhOz7eqPJoR/QkhWyhGMfcLRXWl4p
	uwMaPVfGeWlZu0GGIPVhtGNLilZOc3g1JbAo0Eez1mEpWVDuja5w0TClGTRJr+CK
	LgJUU3FgU78ha4dRmTtxowc1qD4UI9hvhXVw22ZVA=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:in-reply-to:references:date
	:message-id:subject:from:to:content-type; s=default; bh=ixkn+bKz
	N7JdVzKXZQaUiGJxfkc=; b=Pay9aZxQC0HiFXuDpWqMXUlPEU5Uege2ZNb7Ve/h
	q3Uv8si5GLWKBZ/0q98f2zH7S5ObkkDYDBKwHFzavd9b2L0rohy+Bec+zEuhS76E
	ev93frVB1vbaN2anovKXZF8LgDY8+1QAUhanFADLBDmKVnhBjy+6k4tqQ1SvS275
	70I=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-0.9 required=5.0 tests=AWL,BAYES_00,FREEMAIL_ENVFROM_END_DIGIT,FREEMAIL_FROM,RCVD_IN_DNSWL_LOW,SPF_PASS autolearn=ham version=3.3.2
X-HELO: mail-wi0-f171.google.com
MIME-Version: 1.0
X-Received: by 10.180.109.45 with SMTP id hp13mr1063337wib.4.1416074153163; Sat, 15 Nov 2014 09:55:53 -0800 (PST)
In-Reply-To: <40005E53-A327-4E4A-8C71-514E505F9FBC@etr-usa.com>
References: <81578012-FD3F-4463-BC56-ADB092317DD4 AT etr-usa DOT com>	<CABa6CEkRV=3FY6ZVGrdt--rH3PppwCJRD5poU0L2knv2k2ce_w AT mail DOT gmail DOT com>	<25F385A9-3E2D-44FC-998F-D2672F67DFE4 AT etr-usa DOT com>	<m40npq$vrq$1 AT ger DOT gmane DOT org>	<ECD073FF-B78C-4D19-8DE1-5F4E390D2495 AT etr-usa DOT com>	<20141113093335 DOT GI2782 AT calimero DOT vinschen DOT de>	<40005E53-A327-4E4A-8C71-514E505F9FBC AT etr-usa DOT com>
Date: Sat, 15 Nov 2014 12:55:52 -0500
Message-ID: <CAD8GWstJ+BkbkCJfE_48=b2cg0uzc8pkd1UnevP6-=3DHL+Buw@mail.gmail.com>
Subject: Re: /usr/local, /var and */tmp in c:\Users\Public
From: Lee <ler762 AT gmail DOT com>
To: cygwin AT cygwin DOT com
Content-Type: text/plain; charset=ISO-8859-1
X-IsSubscribed: yes

On 11/13/14, Warren Young   wrote:
> On Nov 13, 2014, at 2:33 AM, Corinna Vinschen wrote:
>
>> On Nov 12 17:19, Warren Young wrote:
>>>
>>> I'm not advocating that step so early, but maybe if this breakup does
>>> happen, a few years later setup.exe can start applying some strong
>>> ACLs to files it writes.
>>
>> ??? What "strong" ACLs?
>
> The ones that are not there right now. :)
>
> Just to pick a random example:
>
> $ ls -l /bin/ls.exe
> -rwxrwxr-x 1 Warren None 116253 Oct 13 10:12 /bin/ls.exe

Install cygwin as an admin & users don't get write access:
$ ls -l /bin/ls.exe
-rwxr-xr-x 1 root None 101902 Feb  6  2012 /bin/ls.exe


> The same file's permissions, from Windows' perspective:
>
> http://etr-usa.com/cygwin/ls-perms.png
>
> So, just because I installed Cygwin with my regular user account,

You're doing it wrong.  Install Cygwin using an admin account and
regular user accounts are not allowed write access to system
files/directories:

$ cd /bin

/bin
$ touch foo
touch: cannot touch `foo': Permission denied

/bin
$ cd /usr

/usr
$ touch foo
touch: cannot touch `foo': Permission denied

> I get
> permission to rewrite ls.exe.  This is not a good thing,

In certain circumstances you're right; not a good thing.  If you have
an admin account on the machine, why didn't you install cygwin using
that account & have the permissions set correctly in the first place?
In other circumstances, like not having an admin account, it's nice
being able to install & use cygwin as a regular user vs. not having
access to cygwin at all.


> if our goal is to
> make Cygwin work like Linux while working *within* the Windows environment.
>
>
> IMHO, the way to meet both goals simultaneously is to put programs in
> c:\Program Files,

NOOOOOOOOOOOO!  Please, do not do that by default.  If nothing else,
directory names with embedded spaces should be treated like toxic
waste.

> and to give full-control perms to the local Administrator
> account in the SAM case, or possibly the domain one in the AD case.

Try installing cygwin as an admin.  I suspect you'll get most, if not
all, of what you're asking for.

Regards,
Lee

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple