From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mr4.vodafonemail.de (mr4.vodafonemail.de [145.253.228.164]) by sourceware.org (Postfix) with ESMTPS id 5A6903854554 for ; Mon, 21 Nov 2022 12:39:50 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org 5A6903854554 Authentication-Results: sourceware.org; dmarc=none (p=none dis=none) header.from=nexgo.de Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=nexgo.de DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nexgo.de; s=vfde-smtpout-mb-15sep; t=1669034389; bh=v1qBsGEpTiOv6w096l8tx/nzNbeWR7aegpMwypx1hyM=; h=From:To:Subject:References:Date:In-Reply-To:Message-ID:User-Agent: Content-Type:From; b=cGmuLd+gSby3mW00wXWWZr30t+ED7X+vLjofiFfauI7eGwyQbY9vRLdIW8xpukTL5 YPdFbLKjHA7yeY10QmrJKP2u3EkdZnqi+ZgMC5xwCTO9SqkrPGPZGiFs895Svys218 PxYrE9H6tn9ramFlzkHLi4hxrQzVQAfFj4+JL7Qc= Received: from smtp.vodafone.de (unknown [10.0.0.2]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by mr4.vodafonemail.de (Postfix) with ESMTPS id 4NG6R92f6wz1xxw for ; Mon, 21 Nov 2022 12:39:49 +0000 (UTC) Received: from Otto (p54a0cf01.dip0.t-ipconnect.de [84.160.207.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (prime256v1) server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by smtp.vodafone.de (Postfix) with ESMTPSA id 4NG6R84zRgz9tNY for ; Mon, 21 Nov 2022 12:39:45 +0000 (UTC) From: ASSI To: cygwin-apps@cygwin.com Subject: Re: [Bug] setup regression #2 References: <87pmfn5o2j.fsf@Rainer.invalid> <0c8c757c-4f6b-3b49-5404-99353de48b1b@dronecode.org.uk> <877d1gd83r.fsf@Rainer.invalid> <3f6098ed-0b64-33f2-c8ca-36a92500adbb@dronecode.org.uk> <87pmf2p830.fsf@Rainer.invalid> <8a811ecf-38e7-a631-c09e-92ca4d439cc2@dronecode.org.uk> <87iljjggwl.fsf@Rainer.invalid> <87fsedla3u.fsf@Rainer.invalid> Date: Mon, 21 Nov 2022 13:39:38 +0100 In-Reply-To: (Corinna Vinschen's message of "Mon, 21 Nov 2022 13:32:22 +0100") Message-ID: <87r0xwpjlh.fsf@Otto.invalid> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.1 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-purgate-type: clean X-purgate: clean X-purgate-size: 1338 X-purgate-ID: 155817::1669034388-D8FB84F8-D7FBD7A8/0/0 X-Spam-Status: No, score=-3029.2 required=5.0 tests=BAYES_00,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,KAM_NUMSUBJECT,RCVD_IN_BARRACUDACENTRAL,RCVD_IN_DNSWL_LOW,RCVD_IN_MSPIKE_H2,SPF_HELO_NONE,SPF_PASS,TXREP autolearn=no autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org List-Id: Corinna Vinschen writes: > The idea is that the installation tree has POSIXy permissions and > administrative users have the right to change stuff. The administrators > group is part of the user's token if the process has been started > elevated, so, to me, this looks like a natural choice. As I said, I haven't thought through the implications of doing that. We certainly haven't done a security audit or anything like that w.r.t. group ownership of the Cygwin tree and permission of the installed files. > The other advantage is that the administrators group has a fixed SID on > all systems, while other groups depend on the environment. That goes > for the local group "None" just as well as for the "Domain Users" > group, etc. Yeah, a local non-domain installation currently installs as "None" ("Kein" in german Windows) and domain ones will have "Domain Users" > I'm not adamant about this, it was just what was looking like being the > right thing to do at the time. Especially I was not hot to make the > permission set more complicated than necessary for a POSIX-like system. Agreed. Regards, Achim. -- +<[Q+ Matrix-12 WAVE#46+305 Neuron microQkb Andromeda XTk Blofeld]>+ Waldorf MIDI Implementation & additional documentation: http://Synth.Stromeko.net/Downloads.html#WaldorfDocs