X-Recipient: archive-cygwin AT delorie DOT com
X-Spam-Check-By: sourceware.org
Date: Mon, 22 Jun 2009 15:11:44 +0200
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: HEADSUP maintainers: Packages install scripts without execute 	permissions
Message-ID: <20090622131144.GR5039@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <4A3D1570 DOT 5020506 AT aim DOT com> <20090622094310 DOT GN5039 AT calimero DOT vinschen DOT de>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20090622094310.GN5039@calimero.vinschen.de>
User-Agent: Mutt/1.5.19 (2009-02-20)
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Precedence: bulk
List-Id: <cygwin.cygwin.com>
List-Unsubscribe: <mailto:cygwin-unsubscribe-archive-cygwin=delorie DOT com AT cygwin DOT com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com

Hi,


Here's the problem:  If you exec shell scripts, they should only be run
if the user trying to run the script has execute permissions on the
script.  This requires to check for executability in Cygwin, but as of
today, such a check isn't performed in Cygwin.

I have the patch for this ready, but I found that it would potentially
break a couple of packages which have not set execute permissions on
some of their script files.

As you should know by now, setup for Cygwin 1.7 will set POSIX file
permissions for the files extracted from the tar archives.  That means,
all scripts which don't have execute permissions set, will also not have
execute permissions set after the user installed them.  That's bad.

So I created a list of packages which install scripts into
/etc/preremove, /etc/postinstall, and /usr/bin without setting execute
permissions on them.  Please guys, fix the permissions ASAP.

Corinna Vinschen:

  robots:			etc/postinstall/robots.sh

Reini Urban:

  perl:     			usr/bin/cpan5.10.0
				usr/bin/shasum5.10.0

Christian Franke:

  ddrescue:			etc/postinstall/ddrescue.sh

Jari Aalto:

  colorgcc:			etc/postinstall/colorgcc.sh
  joe:				etc/postinstall/joe-manifest.lst

Frank Seelisch:

  singular-icons:		etc/postinstall/singular-icons.sh

Dave Korn:

  gcc-core:			etc/postinstall/gcc.sh
				etc/preremove/gcc.sh
  gcc-gnat:			etc/postinstall/gcc-gnat.sh
				etc/preremove/gcc-gnat.sh
  gcc-gdc:			etc/postinstall/gcc-gdc.sh
				etc/preremove/gcc-gdc.sh
  gcc-gpc:			etc/postinstall/gcc-gpc.sh
				etc/preremove/gcc-gpc.sh
  gcc-g++:			etc/postinstall/gcc-g++.sh
				etc/preremove/gcc-g++.sh
  gcc-g77:			etc/postinstall/gcc-g77.sh
				etc/preremove/gcc-g77.sh
  gcc-java:			etc/postinstall/gcc-java.sh
				etc/preremove/gcc-java.sh

Yaakov S:

  perl-extutils-pkgconfig:	etc/postinstall/perl-ExtUtils-Pk
  libgnome2:			etc/preremove/libgnome2.sh
  gnome-vfs:			etc/preremove/gnome-vfs2.sh
  ilibIDL:			etc/postinstall/libIDL.sh
  libIDL2:			etc/postinstall/libIDL2.sh

Btw., DLLs should also be executable, otherwise applications will
fail to start.  I found one of them:

  glib:				usr/bin/cyggmodule-1-2-0.dll


Thanks,
Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Project Co-Leader          cygwin AT cygwin DOT com
Red Hat

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple