X-Recipient:	archive-cygwin AT delorie DOT com
X-Original-To:	cygwin AT cygwin DOT com
Delivered-To:	cygwin AT cygwin DOT com
DMARC-Filter:	OpenDMARC Filter v1.4.1 sourceware.org 2D1B23858428
Authentication-Results:	sourceware.org;
	dmarc=pass (p=none dis=none) header.from=gmail.com
Authentication-Results:	sourceware.org; spf=pass smtp.mailfrom=gmail.com
DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112;
	h=to:subject:message-id:date:from:mime-version:from:to:cc;
	bh=dALpP6klw7xb2/COlf+kMquyJtmEs5NQGGvl6GIVlAk=;
	b=Abf1QtcKn5nnUxM3mlc6l9ls6xKXWOIXX6ZgWLevvPz4VpV7AWczEDDQXo0g7hLRNO
	qxdrT36Tc7GYP6e16pNFeYn0RVZHyG5rq1cWKGiQK6lWApUOPa9l6ySqYjH8OLsQzGWR
	8+rndPAaj/OlvUa03saov5mDto3P4fB++pH4SgmZlZZdCV/6OItDU9PFyiOLAayvZt2n
	Jaa26/q7my+Epv17MbWNPe8wfxyt1LNBAGxfrPR8uIfC2MXtjdolNCzMWVAOyblJE2G/
	EUBTCyM/zhHEWZel56mF6Q4/9euXdai5ihJMjB2APW4Ih9OuW0WSX+BY+mhcxAyssvaT
	YeZw==
X-Google-DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed;
	d=1e100.net; s=20210112;
	h=to:subject:message-id:date:from:mime-version:x-gm-message-state
	:from:to:cc;
	bh=dALpP6klw7xb2/COlf+kMquyJtmEs5NQGGvl6GIVlAk=;
	b=r9MUZl2WBBrRpEzGnS2g/XADI8Tqk4IGRcuToVtjBL7ddNMzlKr9IP0VA5cPbEYP7n
	VUxwcI/8vjnjRd3B40g+hWeLunjYl9sdAuLiElblh1G/OIWqFUljpAJQ0IuyiCbIKavW
	lmllTXe6QjDAHFoalZFyG18RV2D8hYgve2LPfkE6/PvEeRjXngWzOA5WYyL3sIunouDE
	tq/v0XQSiyuu7krAEBJ+re6OsetqIrYkrQbGJV7ppZ81M9JJNoVJ4SkshSvG/GBJ81g7
	j3Blsa5nwZWn8uK1xa80A8KWXZ/VSfaTQx4Dq+DlgVqinSY7Nf+wIz6fEAvzr/s/t8qU
	2oRw==
X-Gm-Message-State:	ACgBeo3rI3GlLzWt3BW/S/iv6Y1r4lRgfsUw7ucnk79n6IirhDBC045g
	lUdz3X4heJ1GrKwQLdN/0k6lUitaxiJaN+5SZ3S7tqk9fSrIaQ==
X-Google-Smtp-Source:	AA6agR7yl0api97vBhNxfUERFRRZb4I2R92gfqGuS6ogtNVcYB5csYED1FAH7FzChCIAYkx/d9yk68YzLAAtx7ALbkw=
X-Received:	by 2002:a05:6830:6081:b0:61d:13e9:fabd with SMTP id
	by1-20020a056830608100b0061d13e9fabdmr10779947otb.286.1661971357844; Wed, 31
	Aug 2022 11:42:37 -0700 (PDT)
MIME-Version:	1.0
From:	carbonfiber123irc carbonfiber123irc <carbonfiber123irc AT gmail DOT com>
Date:	Wed, 31 Aug 2022 20:42:25 +0200
Message-ID:	<CABgBby-De+q6uvdB3_+zgCOYnW-MCoW4OybAyg2FM79rA==NDg@mail.gmail.com>
Subject:	Unexpected permissions for home dir install
To:	cygwin AT cygwin DOT com
X-Spam-Status:	No, score=-0.7 required=5.0 tests=BAYES_00, DKIM_SIGNED,
	DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, FREEMAIL_FROM, HTML_MESSAGE,
	RCVD_IN_DNSWL_NONE, SPF_HELO_NONE, SPF_PASS, TXREP,
	T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.6
X-Spam-Checker-Version:	SpamAssassin 3.4.6 (2021-04-09) on
	server2.sourceware.org
X-Content-Filtered-By:	Mailman/MimeDel 2.1.29
X-BeenThere:	cygwin AT cygwin DOT com
X-Mailman-Version:	2.1.29
List-Id:	General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Archive:	<https://cygwin.com/pipermail/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe:	<https://cygwin.com/mailman/listinfo/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
Sender:	"Cygwin" <cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com>

Hello

I have experienced the following unexpected default
behavior when installing cygwin inside my home directory.

Using the --no-admin option and choosing "just me" in the setup.

As user1 when installing cygwin to:
"C:\Users\user1\Downloads\cygwin_test1\"

Then all the directories and files have the read and execute
permissions for the "Everyone" SID.

This means a user2 on the same system can read files inside
"C:\Users\user1\Downloads\cygwin_test1\home\user1\"

It also means that user2 can use stuff in the cygwin install
such as bash, even though I did not intend for that to be available
to user2.

The above applies both to the newest cygwin setup from the cygwin
website as of this writing, and also to the 2.921 setup.

I have worked around the issue myself by setting the permissions
manually after the install. So I am just writing this to inform
you that I found the behavior unexpected, and then you can determine
if you consider it a bug or not.

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

- Raw text -