From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-ot1-x336.google.com (mail-ot1-x336.google.com [IPv6:2607:f8b0:4864:20::336]) by sourceware.org (Postfix) with ESMTPS id 2D1B23858428 for ; Wed, 31 Aug 2022 18:42:39 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org 2D1B23858428 Authentication-Results: sourceware.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=gmail.com Received: by mail-ot1-x336.google.com with SMTP id v2-20020a056830090200b006397457afecso10181498ott.13 for ; Wed, 31 Aug 2022 11:42:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=to:subject:message-id:date:from:mime-version:from:to:cc; bh=dALpP6klw7xb2/COlf+kMquyJtmEs5NQGGvl6GIVlAk=; b=Abf1QtcKn5nnUxM3mlc6l9ls6xKXWOIXX6ZgWLevvPz4VpV7AWczEDDQXo0g7hLRNO qxdrT36Tc7GYP6e16pNFeYn0RVZHyG5rq1cWKGiQK6lWApUOPa9l6ySqYjH8OLsQzGWR 8+rndPAaj/OlvUa03saov5mDto3P4fB++pH4SgmZlZZdCV/6OItDU9PFyiOLAayvZt2n Jaa26/q7my+Epv17MbWNPe8wfxyt1LNBAGxfrPR8uIfC2MXtjdolNCzMWVAOyblJE2G/ EUBTCyM/zhHEWZel56mF6Q4/9euXdai5ihJMjB2APW4Ih9OuW0WSX+BY+mhcxAyssvaT YeZw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=to:subject:message-id:date:from:mime-version:x-gm-message-state :from:to:cc; bh=dALpP6klw7xb2/COlf+kMquyJtmEs5NQGGvl6GIVlAk=; b=r9MUZl2WBBrRpEzGnS2g/XADI8Tqk4IGRcuToVtjBL7ddNMzlKr9IP0VA5cPbEYP7n VUxwcI/8vjnjRd3B40g+hWeLunjYl9sdAuLiElblh1G/OIWqFUljpAJQ0IuyiCbIKavW lmllTXe6QjDAHFoalZFyG18RV2D8hYgve2LPfkE6/PvEeRjXngWzOA5WYyL3sIunouDE tq/v0XQSiyuu7krAEBJ+re6OsetqIrYkrQbGJV7ppZ81M9JJNoVJ4SkshSvG/GBJ81g7 j3Blsa5nwZWn8uK1xa80A8KWXZ/VSfaTQx4Dq+DlgVqinSY7Nf+wIz6fEAvzr/s/t8qU 2oRw== X-Gm-Message-State: ACgBeo3rI3GlLzWt3BW/S/iv6Y1r4lRgfsUw7ucnk79n6IirhDBC045g lUdz3X4heJ1GrKwQLdN/0k6lUitaxiJaN+5SZ3S7tqk9fSrIaQ== X-Google-Smtp-Source: AA6agR7yl0api97vBhNxfUERFRRZb4I2R92gfqGuS6ogtNVcYB5csYED1FAH7FzChCIAYkx/d9yk68YzLAAtx7ALbkw= X-Received: by 2002:a05:6830:6081:b0:61d:13e9:fabd with SMTP id by1-20020a056830608100b0061d13e9fabdmr10779947otb.286.1661971357844; Wed, 31 Aug 2022 11:42:37 -0700 (PDT) MIME-Version: 1.0 From: carbonfiber123irc carbonfiber123irc Date: Wed, 31 Aug 2022 20:42:25 +0200 Message-ID: Subject: Unexpected permissions for home dir install To: cygwin@cygwin.com X-Spam-Status: No, score=-0.7 required=5.0 tests=BAYES_00, DKIM_SIGNED, DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, FREEMAIL_FROM, HTML_MESSAGE, RCVD_IN_DNSWL_NONE, SPF_HELO_NONE, SPF_PASS, TXREP, T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: cygwin@cygwin.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: General Cygwin discussions and problem reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 31 Aug 2022 18:42:41 -0000 Hello I have experienced the following unexpected default behavior when installing cygwin inside my home directory. Using the --no-admin option and choosing "just me" in the setup. As user1 when installing cygwin to: "C:\Users\user1\Downloads\cygwin_test1\" Then all the directories and files have the read and execute permissions for the "Everyone" SID. This means a user2 on the same system can read files inside "C:\Users\user1\Downloads\cygwin_test1\home\user1\" It also means that user2 can use stuff in the cygwin install such as bash, even though I did not intend for that to be available to user2. The above applies both to the newest cygwin setup from the cygwin website as of this writing, and also to the 2.921 setup. I have worked around the issue myself by setting the permissions manually after the install. So I am just writing this to inform you that I found the behavior unexpected, and then you can determine if you consider it a bug or not. From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-ot1-x336.google.com (mail-ot1-x336.google.com [IPv6:2607:f8b0:4864:20::336]) by sourceware.org (Postfix) with ESMTPS id 2D1B23858428 for ; Wed, 31 Aug 2022 18:42:39 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org 2D1B23858428 Authentication-Results: sourceware.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=gmail.com Received: by mail-ot1-x336.google.com with SMTP id v2-20020a056830090200b006397457afecso10181498ott.13 for ; Wed, 31 Aug 2022 11:42:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=to:subject:message-id:date:from:mime-version:from:to:cc; bh=dALpP6klw7xb2/COlf+kMquyJtmEs5NQGGvl6GIVlAk=; b=Abf1QtcKn5nnUxM3mlc6l9ls6xKXWOIXX6ZgWLevvPz4VpV7AWczEDDQXo0g7hLRNO qxdrT36Tc7GYP6e16pNFeYn0RVZHyG5rq1cWKGiQK6lWApUOPa9l6ySqYjH8OLsQzGWR 8+rndPAaj/OlvUa03saov5mDto3P4fB++pH4SgmZlZZdCV/6OItDU9PFyiOLAayvZt2n Jaa26/q7my+Epv17MbWNPe8wfxyt1LNBAGxfrPR8uIfC2MXtjdolNCzMWVAOyblJE2G/ EUBTCyM/zhHEWZel56mF6Q4/9euXdai5ihJMjB2APW4Ih9OuW0WSX+BY+mhcxAyssvaT YeZw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=to:subject:message-id:date:from:mime-version:x-gm-message-state :from:to:cc; bh=dALpP6klw7xb2/COlf+kMquyJtmEs5NQGGvl6GIVlAk=; b=r9MUZl2WBBrRpEzGnS2g/XADI8Tqk4IGRcuToVtjBL7ddNMzlKr9IP0VA5cPbEYP7n VUxwcI/8vjnjRd3B40g+hWeLunjYl9sdAuLiElblh1G/OIWqFUljpAJQ0IuyiCbIKavW lmllTXe6QjDAHFoalZFyG18RV2D8hYgve2LPfkE6/PvEeRjXngWzOA5WYyL3sIunouDE tq/v0XQSiyuu7krAEBJ+re6OsetqIrYkrQbGJV7ppZ81M9JJNoVJ4SkshSvG/GBJ81g7 j3Blsa5nwZWn8uK1xa80A8KWXZ/VSfaTQx4Dq+DlgVqinSY7Nf+wIz6fEAvzr/s/t8qU 2oRw== X-Gm-Message-State: ACgBeo3rI3GlLzWt3BW/S/iv6Y1r4lRgfsUw7ucnk79n6IirhDBC045g lUdz3X4heJ1GrKwQLdN/0k6lUitaxiJaN+5SZ3S7tqk9fSrIaQ== X-Google-Smtp-Source: AA6agR7yl0api97vBhNxfUERFRRZb4I2R92gfqGuS6ogtNVcYB5csYED1FAH7FzChCIAYkx/d9yk68YzLAAtx7ALbkw= X-Received: by 2002:a05:6830:6081:b0:61d:13e9:fabd with SMTP id by1-20020a056830608100b0061d13e9fabdmr10779947otb.286.1661971357844; Wed, 31 Aug 2022 11:42:37 -0700 (PDT) MIME-Version: 1.0 From: carbonfiber123irc carbonfiber123irc Date: Wed, 31 Aug 2022 20:42:25 +0200 Message-ID: Subject: Unexpected permissions for home dir install To: cygwin@cygwin.com Content-Type: multipart/alternative; boundary="0000000000006948ad05e78ddc36" X-Spam-Status: No, score=-0.7 required=5.0 tests=BAYES_00,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FREEMAIL_FROM,HTML_MESSAGE,RCVD_IN_DNSWL_NONE,SPF_HELO_NONE,SPF_PASS,TXREP,T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org List-Id: Message-ID: <20220831184225.z2-acPbVHk2XRdX4GQT9UD0shaFoNavOQRhronRuLGs@z> --0000000000006948ad05e78ddc36 Content-Type: text/plain; charset="UTF-8" Hello I have experienced the following unexpected default behavior when installing cygwin inside my home directory. Using the --no-admin option and choosing "just me" in the setup. As user1 when installing cygwin to: "C:\Users\user1\Downloads\cygwin_test1\" Then all the directories and files have the read and execute permissions for the "Everyone" SID. This means a user2 on the same system can read files inside "C:\Users\user1\Downloads\cygwin_test1\home\user1\" It also means that user2 can use stuff in the cygwin install such as bash, even though I did not intend for that to be available to user2. The above applies both to the newest cygwin setup from the cygwin website as of this writing, and also to the 2.921 setup. I have worked around the issue myself by setting the permissions manually after the install. So I am just writing this to inform you that I found the behavior unexpected, and then you can determine if you consider it a bug or not. --0000000000006948ad05e78ddc36--