From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mr3.vodafonemail.de (mr3.vodafonemail.de [145.253.228.163]) by sourceware.org (Postfix) with ESMTPS id D59B93858D32 for ; Thu, 1 Dec 2022 19:51:07 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org D59B93858D32 Authentication-Results: sourceware.org; dmarc=none (p=none dis=none) header.from=nexgo.de Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=nexgo.de DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nexgo.de; s=vfde-smtpout-mb-15sep; t=1669924266; bh=u/6/Q8N55DpdP2UQDTQkwx92fi5K4a4kphWG4Ud8miw=; h=From:To:Subject:References:Date:In-Reply-To:Message-ID:User-Agent: Content-Type:From; b=d5H61zNAwTbMiQj3FNwlid7jq/s1vtwhvhdvWJ+ADlFbqzBhHv8DtorOsJ3Yngiyx YeibDgPHdWF4FSJm8aZdwUxdHWuXo64gt8h0RBVpSmBz8DA8cgbd+mDAr/VRw+Df6d fsooFH9UYTDBMbrLVfmCUJTZrxA7gQ/Rj9e/wKMc= Received: from smtp.vodafone.de (unknown [10.0.0.2]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by mr3.vodafonemail.de (Postfix) with ESMTPS id 4NNRXB3Rxjz208v for ; Thu, 1 Dec 2022 19:51:06 +0000 (UTC) Received: from Gertrud (p54a0cf01.dip0.t-ipconnect.de [84.160.207.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (prime256v1) server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by smtp.vodafone.de (Postfix) with ESMTPSA id 4NNRX61qZlz9vtV for ; Thu, 1 Dec 2022 19:50:59 +0000 (UTC) From: Achim Gratz To: cygwin-apps@cygwin.com Subject: Re: [Bug] setup regression #2 References: <87pmfn5o2j.fsf@Rainer.invalid> <0c8c757c-4f6b-3b49-5404-99353de48b1b@dronecode.org.uk> <877d1gd83r.fsf@Rainer.invalid> <3f6098ed-0b64-33f2-c8ca-36a92500adbb@dronecode.org.uk> <87pmf2p830.fsf@Rainer.invalid> <8a811ecf-38e7-a631-c09e-92ca4d439cc2@dronecode.org.uk> <87iljjggwl.fsf@Rainer.invalid> <87fsedla3u.fsf@Rainer.invalid> <16c0bdb4-00bb-3f96-7940-2273b6f0b82b@t-online.de> Date: Thu, 01 Dec 2022 20:50:50 +0100 In-Reply-To: <16c0bdb4-00bb-3f96-7940-2273b6f0b82b@t-online.de> (Christian Franke's message of "Wed, 30 Nov 2022 22:22:40 +0100") Message-ID: <87y1rq6gyt.fsf@Rainer.invalid> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.1 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-purgate-type: clean X-purgate: clean X-purgate-size: 1505 X-purgate-ID: 155817::1669924262-D6FFC4DE-040F3FF2/0/0 X-Spam-Status: No, score=-3029.1 required=5.0 tests=BAYES_00,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,KAM_NUMSUBJECT,RCVD_IN_BARRACUDACENTRAL,RCVD_IN_DNSWL_LOW,SPF_HELO_NONE,SPF_PASS,TXREP autolearn=no autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org List-Id: Christian Franke writes: > Anything installed with "All Users" option should IMO be protected > against modifications by any regular non-elevated user. Yes. > This is not the case if the RID=513 group ("HOST\None", > "DOMAIN\Domain-Users") is used. Many upstream projects install > directories and files with permissions like 0664, 0775, 0660 or > 0770. This is safe when the group is "root". On current Cygwin, all > users have R/W access regardless of the "other" permission bits. Correct. That's why I was hoping I could use a dedicated group (either local or domain depending the install) for "Cygwin Administrators". > Using the administrators group as discussed here would solve this but > apparently introduces interesting new permission problems with some > packages. Could these possibly be solved by the maintainers of the > affected packages? The problem is not the Administrators group per se AFAICT, but the change from a different group to another mid-flight. If the group could be specified as alluded to above, I can keep the "wrong" group for existing installs until I get around to fix their group ownership and ensure that any new installs can be administered by whatever group of people will be responsible for keeping things running smoothly. Regards, Achim. -- +<[Q+ Matrix-12 WAVE#46+305 Neuron microQkb Andromeda XTk Blofeld]>+ SD adaptations for Waldorf Q V3.00R3 and Q+ V3.54R2: http://Synth.Stromeko.net/Downloads.html#WaldorfSDada