Mailing-List: contact cygwin-developers-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-developers-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin-developers/>
List-Post: <mailto:cygwin-developers AT cygwin DOT com>
List-Help: <mailto:cygwin-developers-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-developers-owner AT cygwin DOT com
Delivered-To: mailing list cygwin-developers AT cygwin DOT com
X-Authentication-Warning: slinky.cs.nyu.edu: pechtcha owned process doing -bs
Date: Tue, 22 Oct 2002 18:25:00 -0400 (EDT)
From: Igor Pechtchanski <pechtcha AT cs DOT nyu DOT edu>
Reply-To: cygwin-developers AT cygwin DOT com
To: Robert Collins <rbcollins AT cygwin DOT com>
cc: cygwin-developers AT cygwin DOT com
Subject: Re: Avoiding /etc/passwd and /etc/group scans
In-Reply-To: <1035321750.1455.14.camel@lifelesswks>
Message-ID: <Pine.GSO.4.44.0210221817290.8025-100000@slinky.cs.nyu.edu>
Importance: Normal
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII

On 23 Oct 2002, Robert Collins wrote:

> On Wed, 2002-10-23 at 07:19, Christopher Faylor wrote:
>
> > >- Do the modes depend on the value of ntsec when setup is run
> > >  (e.g. inheriting from the directory)?
> >
> > Nope.  setup isn't a cygwin app, so...
> > cgf
>
> And because ntsec wasn't the default we couldn't set reasonable acls...
>
> Here's a short term workaround, until we fix setup.exe.
>
> Add a .bat file as a postinstall script that scans the cygwin tree and
> sets executable rights to .exe and .dll files using the cacls command.
>
> Rob

You should be careful of pre-existent files.  The user may have set their
permissions to non-executable on purpose, and will be surprised if they
suddenly become executable.  It would be safer if the postinstall .bat
file only affected the executables that setup has just installed.  I know
this is against the general principles of setup, but could it, perhaps,
generate that .bat file?  Another possibility would be doing this only for
new installs, although I'm not quite sure how to detect this within
either setup or the postinstall script...
	Igor
-- 
				http://cs.nyu.edu/~pechtcha/
      |\      _,,,---,,_		pechtcha AT cs DOT nyu DOT edu
ZZZzz /,`.-'`'    -.  ;-;;,_		igor AT watson DOT ibm DOT com
     |,4-  ) )-,_. ,\ (  `'-'		Igor Pechtchanski
    '---''(_/--'  `-'\_) fL	a.k.a JaguaR-R-R-r-r-r-.-.-.  Meow!

"Water molecules expand as they grow warmer" (C) Popular Science, Oct'02, p.51