DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=B/gbMOvho5zTnt+7l8mpUeHKDwjeCQy4bSx4Ootv1/Cel17ZyukJ/
	SOhZUFGvCiEZ01kzSuLlTjZNS02LaRGbTxeG21yl+SysNvsuefdYyNH4Ms+vj/Ac
	sGWzeo/Sy2vD34Sv4756PnmKVRwk7JCwAuK5A5Oovwzqhe1otBwLQI=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Date: Thu, 30 Apr 2015 10:24:50 +0200
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: Group Permissions on root folders problem (Windows 10 TP build 10061)
Message-ID: <20150430082450.GC19795@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <CAMH9mcEc+2hEypQS6WG_Q9MghP-dzE0FVV+7kv6cHC23SoxG6Q AT mail DOT gmail DOT com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;	protocol="application/pgp-signature"; boundary="qtZFehHsKgwS5rPz"
Content-Disposition: inline
In-Reply-To: <CAMH9mcEc+2hEypQS6WG_Q9MghP-dzE0FVV+7kv6cHC23SoxG6Q@mail.gmail.com>
User-Agent: Mutt/1.5.23 (2014-03-12)

--qtZFehHsKgwS5rPz
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Apr 29 10:45, Brian Buchanan wrote:
> I did a fresh cygwin-64 (setup-x86_64 version 2.870) install under
> build 10061 of Windows 10 Technical Preview.
>=20
> The group permissions in the root look wrong.
>=20
> $ ls -lA /
> total 321
> drwx---r-x+ 1 Brian Brian               0 Apr 29 10:31 bin
> dr-xr-xr-x  1 Brian Brian               0 Apr 29 10:31 cygdrive
> -rwxr-xr-x  1 Brian Administrators     59 Apr 29 10:31 Cygwin.bat
> -rw-r--r--  1 Brian Administrators 157097 Apr 29 10:31 Cygwin.ico
> -rw-r--r--  1 Brian Administrators  53342 Apr 29 10:31 Cygwin-Terminal.ico
> drwx---r-x+ 1 Brian Brian               0 Apr 29 10:31 dev
> drwx---r-x+ 1 Brian Brian               0 Apr 29 10:31 etc
> drwx---rwt+ 1 Brian Brian               0 Apr 29 10:31 home
> drwx---r-x+ 1 Brian Brian               0 Apr 29 10:31 lib
> dr-xr-xr-x  9 Brian Brian               0 Apr 29 10:31 proc
> drwx---r-x+ 1 Brian Brian               0 Apr 29 10:31 sbin
> drwx---rwt+ 1 Brian Brian               0 Apr 29 10:31 tmp
> drwx---r-x+ 1 Brian Brian               0 Apr 29 10:30 usr
> drwx---r-x+ 1 Brian Brian               0 Apr 29 10:30 var
>=20
> I'm logged on with a Microsoft account and ran the installer as an
> Administrator.
>=20
> This is a particular problem running ssh-host-config -y
> $ ssh-host-config -y
>=20
> *** Info: Generating missing SSH host keys
> ssh-keygen: generating new host keys: RSA1 RSA DSA ECDSA ED25519
> *** Info: Creating default /etc/ssh_config file
> *** Info: Creating default /etc/sshd_config file
>=20
> *** Info: StrictModes is set to 'yes' by default.
> *** Info: This is the recommended setting, but it requires that the POSIX
> *** Info: permissions of the user's home directory, the user's .ssh
> *** Info: directory, and the user's ssh key files are tight so that
> *** Info: only the user has write permissions.
> *** Info: On the other hand, StrictModes don't work well with default
> *** Info: Windows permissions of a home directory mounted with the
> *** Info: 'noacl' option, and they don't work at all if the home
> *** Info: directory is on a FAT or FAT32 partition.
> *** Query: Should StrictModes be used? (yes/no) yes
>=20
> *** Info: Privilege separation is set to 'sandbox' by default since
> *** Info: OpenSSH 6.1.  This is unsupported by Cygwin and has to be set
> *** Info: to 'yes' or 'no'.
> *** Info: However, using privilege separation requires a non-privileged a=
ccount
> *** Info: called 'sshd'.
> *** Info: For more info on privilege separation read
> /usr/share/doc/openssh/README.privsep.
> *** Query: Should privilege separation be used? (yes/no) yes
> *** Warning: The permissions on the directory /var are not correct.
> *** Warning: They must match the regexp d..x..x..[xt]
> *** ERROR: Problem with /var directory. Exiting.

Hmm, the permission test in the csih helper script is apparently not up
to the task in your situation.  As a workaround, you may want to change
the group ownership of /var/empty to "Users" and chmod it to 755, then
run the ssh-host-config script again.


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--qtZFehHsKgwS5rPz
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=ums2
-----END PGP SIGNATURE-----

--qtZFehHsKgwS5rPz--