Bash script permissions

Bash script permissions

[David Monk]

I am running the latest net realease on NT 4 and Win 2k. I am having a
problem limiting, from cygwin, the permissions on a bash script so that only
the owner can execute it.
I finally after much fiddling figured out that with the shebang line in the
script, cygwin immediately thinks it's executable by all. If I try any chmod
affecting it's executable status, it's ignored. How can I work around this?
Also, how can this be worked around on Win9x also, as it is planned to
eventually distribute this script set.

Thanks,
David Monk CCNA. MCSE
david@purplebear.net




--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Re: Bash script permissions

[Larry Hall (RFK Partners, Inc)]

At 03:50 PM 9/12/2001, David Monk wrote:
>I am running the latest net realease on NT 4 and Win 2k. I am having a
>problem limiting, from cygwin, the permissions on a bash script so that only
>the owner can execute it.
>I finally after much fiddling figured out that with the shebang line in the
>script, cygwin immediately thinks it's executable by all. If I try any chmod
>affecting it's executable status, it's ignored. How can I work around this?


Set ntsec in your CYGWIN environment before starting any Cygwin app.


>Also, how can this be worked around on Win9x also, as it is planned to
>eventually distribute this script set.


You can't.  9x has no concept of security. 



Larry Hall                              lhall@rfk.com
RFK Partners, Inc.                      http://www.rfk.com
118 Washington Street                   (508) 893-9779 - RFK Office
Holliston, MA 01746                     (508) 893-9889 - FAX


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Re: Bash script permissions

[Corinna Vinschen]

On Wed, Sep 12, 2001 at 02:50:30PM -0500, David Monk wrote:
> I am running the latest net realease on NT 4 and Win 2k. I am having a
> problem limiting, from cygwin, the permissions on a bash script so that only
> the owner can execute it.
> I finally after much fiddling figured out that with the shebang line in the
> script, cygwin immediately thinks it's executable by all. If I try any chmod
> affecting it's executable status, it's ignored. How can I work around this?
> Also, how can this be worked around on Win9x also, as it is planned to
> eventually distribute this script set.

On NT use CYGWIN=ntsec to use the NTFS ACLs, on 9x forget about it.
Where there's no security at all...

Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Developer                                mailto:cygwin@cygwin.com
Red Hat, Inc.

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Re: Bash script permissions

[David Monk]

> On NT use CYGWIN=ntsec to use the NTFS ACLs, on 9x forget about it.
> Where there's no security at all...

There are problems with this approach. When I set ntsec in the CYGWIN
environment variable, everything is now marked as executable. And I DO mean
everything. It would be a nightmare to manually go through and change
permissions on everything.

Maybe Cygwin won't be able to be a supported platform after all.

Thanks anyway,
David Monk CCNA, MCSE
david@purplebear.net




--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Re: Bash script permissions

[Larry Hall (RFK Partners, Inc)]

At 04:35 PM 9/12/2001, David Monk wrote:
> > On NT use CYGWIN=ntsec to use the NTFS ACLs, on 9x forget about it.
> > Where there's no security at all...
>
>There are problems with this approach. When I set ntsec in the CYGWIN
>environment variable, everything is now marked as executable. And I DO mean
>everything. It would be a nightmare to manually go through and change
>permissions on everything.


Did you have a snapshot DLL on your system at any time?  That might explain
what you see.  The behavior you describe is not typical.


Larry Hall                              lhall@rfk.com
RFK Partners, Inc.                      http://www.rfk.com
118 Washington Street                   (508) 893-9779 - RFK Office
Holliston, MA 01746                     (508) 893-9889 - FAX


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Re: Bash script permissions

[David Monk]

The only cygwin1.ddl this system has ever seen is the one I installed via
setup.exe from http://sources.redhat.com/cygwin/

David Monk


----- Original Message -----
From: "Larry Hall (RFK Partners, Inc)" <lhall@rfk.com>
To: "David Monk" <david@purplebear.net>; <cygwin@cygwin.com>
Sent: Wednesday, September 12, 2001 3:47 PM
Subject: Re: Bash script permissions


> At 04:35 PM 9/12/2001, David Monk wrote:
> > > On NT use CYGWIN=ntsec to use the NTFS ACLs, on 9x forget about it.
> > > Where there's no security at all...
> >
> >There are problems with this approach. When I set ntsec in the CYGWIN
> >environment variable, everything is now marked as executable. And I DO
mean
> >everything. It would be a nightmare to manually go through and change
> >permissions on everything.
>
>
> Did you have a snapshot DLL on your system at any time?  That might
explain
> what you see.  The behavior you describe is not typical.
>
>
> Larry Hall                              lhall@rfk.com
> RFK Partners, Inc.                      http://www.rfk.com
> 118 Washington Street                   (508) 893-9779 - RFK Office
> Holliston, MA 01746                     (508) 893-9889 - FAX
>
>


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Re: Bash script permissions

[Larry Hall (RFK Partners, Inc)]

OK, I can't explain the behavior you see with ntsec enabled then.

Sorry.

Larry


At 04:50 PM 9/12/2001, David Monk wrote:
>The only cygwin1.ddl this system has ever seen is the one I installed via
>setup.exe from http://sources.redhat.com/cygwin/
>
>David Monk
>
>
>----- Original Message -----
>From: "Larry Hall (RFK Partners, Inc)" <lhall@rfk.com>
>To: "David Monk" <david@purplebear.net>; <cygwin@cygwin.com>
>Sent: Wednesday, September 12, 2001 3:47 PM
>Subject: Re: Bash script permissions
>
>
> > At 04:35 PM 9/12/2001, David Monk wrote:
> > > > On NT use CYGWIN=ntsec to use the NTFS ACLs, on 9x forget about it.
> > > > Where there's no security at all...
> > >
> > >There are problems with this approach. When I set ntsec in the CYGWIN
> > >environment variable, everything is now marked as executable. And I DO
>mean
> > >everything. It would be a nightmare to manually go through and change
> > >permissions on everything.
> >
> >
> > Did you have a snapshot DLL on your system at any time?  That might
>explain
> > what you see.  The behavior you describe is not typical.
> >
> >
> > Larry Hall                              lhall@rfk.com
> > RFK Partners, Inc.                      http://www.rfk.com
> > 118 Washington Street                   (508) 893-9779 - RFK Office
> > Holliston, MA 01746                     (508) 893-9889 - FAX
> >
> >


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Re: Bash script permissions

[Corinna Vinschen]

On Wed, Sep 12, 2001 at 03:35:33PM -0500, David Monk wrote:
> > On NT use CYGWIN=ntsec to use the NTFS ACLs, on 9x forget about it.
> > Where there's no security at all...
> 
> There are problems with this approach. When I set ntsec in the CYGWIN
> environment variable, everything is now marked as executable. And I DO mean
> everything. It would be a nightmare to manually go through and change
> permissions on everything.

Apparently you don't seem to understand the concept of NTFS security
and _why_ it's set that way after switching ntsec on. Besides the
Microsoft documentation read http://cygwin.com/cygwin-ug-net/ntsec.html .
Thinko:  When Cygwin has been installed using no security settings at
att, how are the default settings on the files...

> Maybe Cygwin won't be able to be a supported platform after all.

It could depend on the developer of the application, too, not only
on the developer of the underlying system...

Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Developer                                mailto:cygwin@cygwin.com
Red Hat, Inc.

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Re: Bash script permissions

[David Monk]

> Apparently you don't seem to understand the concept of NTFS security
> and _why_ it's set that way after switching ntsec on. Besides the
> Microsoft documentation read http://cygwin.com/cygwin-ug-net/ntsec.html .
> Thinko:  When Cygwin has been installed using no security settings at
> att, how are the default settings on the files...
>

I would actually, considering my environment, love to switch to using the
ntsec setting. But, how do I change over to the new setting without a whole
ton of work? I have made so many additions to cygwin since original
installation here.

David Monk



--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Re: Bash script permissions

[Christopher Faylor]

On Wed, Sep 12, 2001 at 04:01:24PM -0500, David Monk wrote:
>> Apparently you don't seem to understand the concept of NTFS security
>> and _why_ it's set that way after switching ntsec on. Besides the
>> Microsoft documentation read http://cygwin.com/cygwin-ug-net/ntsec.html .
>> Thinko:  When Cygwin has been installed using no security settings at
>> att, how are the default settings on the files...
>>
>
>I would actually, considering my environment, love to switch to using the
>ntsec setting. But, how do I change over to the new setting without a whole
>ton of work? I have made so many additions to cygwin since original
>installation here.

chmod -R a-x /lib /etc
etc.
Leave the directories containing binary files alone.

You don't have to laboriously do a chmod for every file.

cgf

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Re: Bash script permissions

[David Monk]

> chmod -R a-x /lib /etc
> etc.
> Leave the directories containing binary files alone.
>
> You don't have to laboriously do a chmod for every file.
>
> cgf

This is great and all, but it will leave any subdirectories thereunder
inaccessible until +x is set on them.

David Monk




--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Re: Bash script permissions

[Rick Rankin]

How 'bout "find . -type d | xargs chmod a+x" to fix the directory settings.

--Rick
--- David Monk <david@purplebear.net> wrote:
> > chmod -R a-x /lib /etc
> > etc.
> > Leave the directories containing binary files alone.
> >
> > You don't have to laboriously do a chmod for every file.
> >
> > cgf
> 
> This is great and all, but it will leave any subdirectories thereunder
> inaccessible until +x is set on them.
> 
> David Monk
> 
> 
> 
> 
> --
> Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
> Bug reporting:         http://cygwin.com/bugs.html
> Documentation:         http://cygwin.com/docs.html
> FAQ:                   http://cygwin.com/faq/
> 


__________________________________________________
Do You Yahoo!?
Get email alerts & NEW webcam video instant messaging with Yahoo! Messenger
http://im.yahoo.com

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Re: Bash script permissions

[Corinna Vinschen]

On Wed, Sep 12, 2001 at 02:45:30PM -0700, Rick Rankin wrote:
> How 'bout "find . -type d | xargs chmod a+x" to fix the directory settings.

And then setting the permissions on files will need another
similar command.  Shouldn't be too hard to figure that out
by yourself using manpages and all...

Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Developer                                mailto:cygwin@cygwin.com
Red Hat, Inc.

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Properly using ntsec, from the beginning

[David Monk]

How would one go about doing a fresh install on NTFS, whether it be NT or
2000, and use the ntsec option of CYGWIN properly, without having to
immediately change file and directory permissions throughout?
IOW, is there a proven method to install Cygwin and get a proper filesystem
tree with permissions on text files, configuration files, and executable
scripts set similar to a typical UNIX filesystem? And also have proper
permission manipulation within cygwin.

David Monk



--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Re: Properly using ntsec, from the beginning

[Corinna Vinschen]

On Thu, Sep 13, 2001 at 08:30:41AM -0500, David Monk wrote:
> How would one go about doing a fresh install on NTFS, whether it be NT or
> 2000, and use the ntsec option of CYGWIN properly, without having to
> immediately change file and directory permissions throughout?
> IOW, is there a proven method to install Cygwin and get a proper filesystem
> tree with permissions on text files, configuration files, and executable
> scripts set similar to a typical UNIX filesystem? And also have proper
> permission manipulation within cygwin.

Setup.exe is not ntsec aware currently and since NT doesn't support
setting POSIX permissions by default, the answer is no.

Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Developer                                mailto:cygwin@cygwin.com
Red Hat, Inc.

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Re: Properly using ntsec, from the beginning

[Gerrit P. Haase]

David Monk schrieb am 2001-09-13, 8:30:

>How would one go about doing a fresh install on NTFS, whether it be NT or
>2000, and use the ntsec option of CYGWIN properly, without having to
>immediately change file and directory permissions throughout?
>IOW, is there a proven method to install Cygwin and get a proper filesystem
>tree with permissions on text files, configuration files, and executable
>scripts set similar to a typical UNIX filesystem? And also have proper
>permission manipulation within cygwin.

Mike Erdely has written a script to fix the permissions 
after a fresh install.

Gerrit

-- 
Here is the script:
http://www.cygwin.com/ml/cygwin/2001-04/msg01668.html


-- 
=^..^=

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Re: Bash script permissions

[Gerrit P. Haase]

David Monk schrieb am 2001-09-12, 14:50:

>I am running the latest net realease on NT 4 and Win 2k. I am having a
>problem limiting, from cygwin, the permissions on a bash script so that only
>the owner can execute it.
>I finally after much fiddling figured out that with the shebang line in the
>script, cygwin immediately thinks it's executable by all. If I try any chmod
>affecting it's executable status, it's ignored. How can I work around this?

set CYGWIN=ntsec

>Also, how can this be worked around on Win9x also, as it is planned to
>eventually distribute this script set.

There are no permissions on win98. Everyone is allowed to do everything.

Gerrit


-- 
=^..^=

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

RE: Properly using ntsec, from the beginning

[Berndl, Klaus]

AFAIK there is no such proven method per default, means automaticaly
done by setup.exe for example.

But at http://tech.erdelynet.com/cygwin-perms.asp you will find a script
which at least modifies the permissions for ntsec for all
directories below ~ /etc and /.

You can download the script and very easily modify it so it operates
on additional directories too.

Does this help?,
Klaus

-----Original Message-----
From: David Monk [ mailto:david@purplebear.net ]
Sent: Thursday, September 13, 2001 3:31 PM
To: Corinna Vinschen
Subject: Properly using ntsec, from the beginning


How would one go about doing a fresh install on NTFS, whether it be NT or
2000, and use the ntsec option of CYGWIN properly, without having to
immediately change file and directory permissions throughout?
IOW, is there a proven method to install Cygwin and get a proper filesystem
tree with permissions on text files, configuration files, and executable
scripts set similar to a typical UNIX filesystem? And also have proper
permission manipulation within cygwin.

David Monk



--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Re: Properly using ntsec, from the beginning

[Karl M]

Hi All...

There have been several command scripts posted here for setting up all of 
the file permissions immediately post install. These may be helpful.

Thanks,

...Karl

>From: Corinna Vinschen <cygwin@cygwin.com>
>To: cygwin <cygwin@cygwin.com>
>Subject: Re: Properly using ntsec, from the beginning
>Date: Thu, 13 Sep 2001 15:59:01 +0200
>
>On Thu, Sep 13, 2001 at 08:30:41AM -0500, David Monk wrote:
> > How would one go about doing a fresh install on NTFS, whether it be NT 
>or
> > 2000, and use the ntsec option of CYGWIN properly, without having to
> > immediately change file and directory permissions throughout?
> > IOW, is there a proven method to install Cygwin and get a proper 
>filesystem
> > tree with permissions on text files, configuration files, and executable
> > scripts set similar to a typical UNIX filesystem? And also have proper
> > permission manipulation within cygwin.
>
>Setup.exe is not ntsec aware currently and since NT doesn't support
>setting POSIX permissions by default, the answer is no.
>
>Corinna
>
>--
>Corinna Vinschen                  Please, send mails regarding Cygwin to
>Cygwin Developer                                mailto:cygwin@cygwin.com
>Red Hat, Inc.
>
>--
>Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
>Bug reporting:         http://cygwin.com/bugs.html
>Documentation:         http://cygwin.com/docs.html
>FAQ:                   http://cygwin.com/faq/
>


_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

RE: Properly using ntsec, from the beginning

[Steve Jorgensen]

It is on my to do list to start a project or join an existing project to 
create a security wizard that can be run by setup.exe after install or at 
any time.  This would help in creating and maintaining passwd and group 
files and setting proper ntsec permissions for existing objects.  Its a few 
big projects down on my list, but I do intend to work on it.

On Thursday, September 13, 2001 7:03 AM, Berndl, Klaus 
[SMTP:klaus.berndl@sdm.de] wrote:
> AFAIK there is no such proven method per default, means automaticaly
> done by setup.exe for example.
>
> But at http://tech.erdelynet.com/cygwin-perms.asp you will find a script
> which at least modifies the permissions for ntsec for all
> directories below ~ /etc and /.
>
> You can download the script and very easily modify it so it operates
> on additional directories too.
>
> Does this help?,
> Klaus
>
> -----Original Message-----
> From: David Monk [ mailto:david@purplebear.net ]
> Sent: Thursday, September 13, 2001 3:31 PM
> To: Corinna Vinschen
> Subject: Properly using ntsec, from the beginning
>
>
> How would one go about doing a fresh install on NTFS, whether it be NT or
> 2000, and use the ntsec option of CYGWIN properly, without having to
> immediately change file and directory permissions throughout?
> IOW, is there a proven method to install Cygwin and get a proper 
filesystem
> tree with permissions on text files, configuration files, and executable
> scripts set similar to a typical UNIX filesystem? And also have proper
> permission manipulation within cygwin.
>
> David Monk
>
>
>
> --
> Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
> Bug reporting:         http://cygwin.com/bugs.html
> Documentation:         http://cygwin.com/docs.html
> FAQ:                   http://cygwin.com/faq/
>
> --
> Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
> Bug reporting:         http://cygwin.com/bugs.html
> Documentation:         http://cygwin.com/docs.html
> FAQ:                   http://cygwin.com/faq/
> 

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/