Mailing-List: contact cygwin-developers-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-developers-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin-developers/>
List-Post: <mailto:cygwin-developers AT cygwin DOT com>
List-Help: <mailto:cygwin-developers-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-developers-owner AT cygwin DOT com
Delivered-To: mailing list cygwin-developers AT cygwin DOT com
Date: Tue, 22 Oct 2002 17:31:33 -0400
From: Christopher Faylor <cgf AT redhat DOT com>
To: cygwin-developers AT cygwin DOT com
Subject: Re: Avoiding /etc/passwd and /etc/group scans
Message-ID: <20021022213133.GI6429@redhat.com>
Reply-To: cygwin-developers AT cygwin DOT com
Mail-Followup-To: cygwin-developers AT cygwin DOT com
References: <20021022162432 DOT GF514 AT redhat DOT com> <3DB58CBD DOT 87B2BDD8 AT ieee DOT org> <20021022181947 DOT GA4729 AT redhat DOT com> <3DB5A076 DOT ABAFF076 AT ieee DOT org> <20021022191217 DOT GD4828 AT redhat DOT com> <3DB5AB53 DOT B434ED90 AT ieee DOT org> <20021022202004 DOT GA6995 AT redhat DOT com> <3DB5BA56 DOT A76B6463 AT ieee DOT org> <20021022211930 DOT GF6429 AT redhat DOT com> <1035321750 DOT 1455 DOT 14 DOT camel AT lifelesswks>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <1035321750.1455.14.camel@lifelesswks>
User-Agent: Mutt/1.5.1i

On Wed, Oct 23, 2002 at 07:22:30AM +1000, Robert Collins wrote:
>On Wed, 2002-10-23 at 07:19, Christopher Faylor wrote:
>> >- Do the modes depend on the value of ntsec when setup is run 
>> >  (e.g. inheriting from the directory)?  
>> 
>> Nope.  setup isn't a cygwin app, so...
>> cgf
>
>And because ntsec wasn't the default we couldn't set reasonable acls...

Why would that matter?  If setting reasonable acls is going to hurt the
CYGWIN=nontsec case then that's not good either.

>Here's a short term workaround, until we fix setup.exe.
>
>Add a .bat file as a postinstall script that scans the cygwin tree and
>sets executable rights to .exe and .dll files using the cacls command.

If it is that simple, then sure.  Pierre is this doable?

cgf