DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:date:from:mime-version:to:subject
	:references:in-reply-to:content-type:content-transfer-encoding;
	 q=dns; s=default; b=VYUmphVPK+F7OyzTCrk2YCrTMDNotpwX4anglJeO5yB
	s0BiViz3DmV2Epd6VTH8r6lzsnrM62iVp5vPDjgxmVQaop4MADkqxmdYmeiu0hXw
	iiKXs6oHaln4gg9FQywZglPd/eGCxgjSyHhD6R/DtsNBy92GNQXO2Ppp7S2ZQY2k
	=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Message-id: <5301004C.1050203@verizon.net>
Date: Sun, 16 Feb 2014 13:15:40 -0500
From: Gerry Reno <greno AT verizon DOT net>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130625 Thunderbird/17.0.7
MIME-version: 1.0
To: cygwin AT cygwin DOT com
Subject: Re: Installer cannot write to Cygwin's /usr/local/etc
References: <53001E78 DOT 8060706 AT verizon DOT net> <53006573 DOT 9080301 AT gmail DOT com> <5300F7A2 DOT 5080601 AT verizon DOT net>
In-reply-to: <5300F7A2.5080601@verizon.net>
Content-type: text/plain; charset=ISO-8859-1
Content-transfer-encoding: 7bit

On 02/16/2014 12:38 PM, Gerry Reno wrote:
>
> I ran the acl checks and can find no difference between them which leads to this being yet another WiX/MSI installer
> issue which doesn't surprise me.
>
> Administrator AT WIN-SERVER /cygdrive/c/cygwin/usr/local
> $ getfacl bin
> # file: bin
> # owner: Administrator
> # group: Domain Users
> user::rwx
> group::r-x
> mask:rwx
> other:r-x
> default:user::rwx
> default:group::r-x
> default:other:r-x
>
>
> Administrator AT WIN-SERVER /cygdrive/c/cygwin/usr/local
> $ getfacl etc
> # file: etc
> # owner: Administrator
> # group: Domain Users
> user::rwx
> group::r-x
> mask:rwx
> other:r-x
> default:user::rwx
> default:group::r-x
> default:other:r-x
>
>
> Administrator AT WIN-SERVER /cygdrive/c/cygwin/usr/local
> $ cacls bin
> C:\cygwin\usr\local\bin SECRET\Administrator:F
>                                       SECRET\Domain Users:R
>                                       Everyone:R
>                                       CREATOR OWNER:(OI)(CI)(IO)F
>                                       CREATOR GROUP:(OI)(CI)(IO)R
>                                       Everyone:(OI)(CI)(IO)R
>
>
> Administrator AT WIN-SERVER /cygdrive/c/cygwin/usr/local
> $ cacls etc
> C:\cygwin\usr\local\etc SECRET\Administrator:F
>                                       SECRET\Domain Users:R
>                                       Everyone:R
>                                       CREATOR OWNER:(OI)(CI)(IO)F
>                                       CREATOR GROUP:(OI)(CI)(IO)R
>                                       Everyone:(OI)(CI)(IO)R
>
>
> Administrator AT WIN-SERVER /cygdrive/c/cygwin/usr/local
> $ Icacls bin
> bin SECRET\Administrator:(F)
>     SECRET\Domain Users:(RX)
>     Everyone:(RX)
>     CREATOR OWNER:(OI)(CI)(IO)(F)
>     CREATOR GROUP:(OI)(CI)(IO)(RX)
>     Everyone:(OI)(CI)(IO)(RX)
>
> Successfully processed 1 files; Failed processing 0 files
>
> Administrator AT WIN-SERVER /cygdrive/c/cygwin/usr/local
> $ Icacls etc
> etc SECRET\Administrator:(F)
>     SECRET\Domain Users:(RX)
>     Everyone:(RX)
>     CREATOR OWNER:(OI)(CI)(IO)(F)
>     CREATOR GROUP:(OI)(CI)(IO)(RX)
>     Everyone:(OI)(CI)(IO)(RX)
>
> Successfully processed 1 files; Failed processing 0 files
>
>
> Thanks for your help.
>

In case anyone else runs into this I found the problem, which was that on both these machines there was an already
existing install of Cygwin.

I removed these existing installations and then reran the installer which called out and ran Cygwin setup which created
a whole new Cygwin installation.

This time the installer had no problem copying files into the Cygwin installation.

For completeness here are the acls from the new Cygwin installations.  As you can see the installer uses SYSTEM as the
user account due to perMachine scope and elevated privileges required by UAC.

Administrator AT WIN-SERVER /cygdrive/c/cygwin/usr/local
$ getfacl bin
# file: bin
# owner: SYSTEM
# group: SYSTEM
user::rwx
group::rwx
mask:rwx
other:r-x
default:user::rwx
default:group::r-x
default:other:r-x


Administrator AT WIN-SERVER /cygdrive/c/cygwin/usr/local
$ getfacl etc
# file: etc
# owner: SYSTEM
# group: SYSTEM
user::rwx
group::rwx
mask:rwx
other:r-x
default:user::rwx
default:group::r-x
default:other:r-x


Administrator AT WIN-SERVER /cygdrive/c/cygwin/usr/local
$ cacls bin
C:\cygwin\usr\local\bin NT AUTHORITY\SYSTEM:F
                                      NT AUTHORITY\SYSTEM:R
                                      Everyone:R
                                      CREATOR OWNER:(OI)(CI)(IO)F
                                      CREATOR GROUP:(OI)(CI)(IO)R
                                      Everyone:(OI)(CI)(IO)R


Administrator AT WIN-SERVER /cygdrive/c/cygwin/usr/local
$ cacls etc
C:\cygwin\usr\local\etc NT AUTHORITY\SYSTEM:F
                                      NT AUTHORITY\SYSTEM:R
                                      Everyone:R
                                      CREATOR OWNER:(OI)(CI)(IO)F
                                      CREATOR GROUP:(OI)(CI)(IO)R
                                      Everyone:(OI)(CI)(IO)R


Administrator AT WIN-SERVER /cygdrive/c/cygwin/usr/local
$ Icacls bin
bin NT AUTHORITY\SYSTEM:(F)
    NT AUTHORITY\SYSTEM:(RX)
    Everyone:(RX)
    CREATOR OWNER:(OI)(CI)(IO)(F)
    CREATOR GROUP:(OI)(CI)(IO)(RX)
    Everyone:(OI)(CI)(IO)(RX)

Successfully processed 1 files; Failed processing 0 files

Administrator AT WIN-SERVER /cygdrive/c/cygwin/usr/local
$ Icacls etc
etc NT AUTHORITY\SYSTEM:(F)
    NT AUTHORITY\SYSTEM:(RX)
    Everyone:(RX)
    CREATOR OWNER:(OI)(CI)(IO)(F)
    CREATOR GROUP:(OI)(CI)(IO)(RX)
    Everyone:(OI)(CI)(IO)(RX)

Successfully processed 1 files; Failed processing 0 files

I don't know if there are any other ramifications of Cygwin being installed under SYSTEM account but so far everything seems to work.

Again, thanks for the help tracking this down.


Gerry


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple