DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org B80743858413
Message-ID: <cf3a33c2-469b-5e16-ed88-aaeca43232d9@cornell.edu>
Date: Wed, 31 Aug 2022 15:16:09 -0400
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101
 Thunderbird/102.2.0
Subject: Re: Unexpected permissions for home dir install
To: cygwin AT cygwin DOT com
References: <CABgBby-De+q6uvdB3_+zgCOYnW-MCoW4OybAyg2FM79rA==NDg AT mail DOT gmail DOT com>
Content-Language: en-US
From: Ken Brown <kbrown AT cornell DOT edu>
In-Reply-To: <CABgBby-De+q6uvdB3_+zgCOYnW-MCoW4OybAyg2FM79rA==NDg@mail.gmail.com>
MIME-Version: 1.0
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?eUNRalM3N3RoR05WMmY3VDlLbDIvdEJhVEgyblJuUGVYYkFrQXNkYm9Jb0Vq?=
 =?utf-8?B?MHFNN1hWV1JNVFBFRjQxdFRUdFY4Y0JjL0o0Qm81QVluSFpvMFd5VW9sUWxy?=
 =?utf-8?B?QzVibTAvSmRzL3hCMVFnSmR6R3dLdlBKVXFaVlM3bGdGRXM4aW82Y0ZYc2dS?=
 =?utf-8?B?cEpDTkFRVGV3L0ZDNk8reE1iVVVHOHVZRndsN2dCaG1KSERneTFXTDlFbVJw?=
 =?utf-8?B?ZEFIdm5LTldMdFlDV1JPTDBFbVB6MVdHSUxzblpOdDZoZnF4NStXR3NhWk5W?=
 =?utf-8?B?ZzJqYU9zcytLbytyZ24zUzVhc3pqNkZMeUdQaFR0SUd6MW1uaXVJM1BvSjcy?=
 =?utf-8?B?Yy90c3JMY0hLbjdsUWNqb1UzRE9TdHhTMFdwYWR1cTVNQUxBVksraTBVVWt6?=
 =?utf-8?B?ZTUwYW9yZElTM2EzYVdnMTRvT2dyaXRVVWdweC8yRHhFUHVtUHppRkhwZmVI?=
 =?utf-8?B?SlhuRFI3SG5EODU1bUJDUlU4ejZrU1FTSHVuMERwQTZPU2hDZmZ2WDdicXcw?=
 =?utf-8?B?R1F4L29ML01yanVHdjNoa2tTYUg2dkRTK2E1bXhJNDFMS3VvbWlMRkw4cnpY?=
 =?utf-8?B?QU1BTDN1eTlvTjdsZ202dE5NSlFQNHhDRlgzS0RuSTBrTlpaMjZPWGRsaVp6?=
 =?utf-8?B?bEZhQVdNVHhWUURvTWEzejN6RXZyeG1VenpHaU1IK2g2cXZPdWlrZGdIdFZ6?=
 =?utf-8?B?VEkzZ3VQbUJEakNrZVRrNUpMS0toMDJ4MmV5S2dEcy9rRHVXUUNiMzhqR1or?=
 =?utf-8?B?VFAyWGNFOHlUcTNqWDVkaEsvUlVnT3lzQldCbEZyWTRRUHR2UjBLazNEWmhw?=
 =?utf-8?B?UzlLcmY3OS94NTFhNG1IZ2JUTlFSRllRMjhKTkh6MzdtZVpvcUlWQ0RQSENk?=
 =?utf-8?B?WGtlOVVldjYxUVR0ZTg1YmdDaHE5T2FDUTNqMnZLN001QWpQY2F4OXVsZDkr?=
 =?utf-8?B?bzBFSS9wa1NqeDVoL0ZONm15UmRsK0tPbEg5Y2dYZFBZc0pXd2xXRVEvdjJV?=
 =?utf-8?B?T3BaNjBKdFNyYUo3bFpQSkU0amtQTHlGVmlFc2NGNk02TmRVRzNzT0xqZDVa?=
 =?utf-8?B?UWI0SEVNYmU3S3M1enZJQm9BSnRLVHFZelRHdWVxRjNWVVRDQ0JMcytDM1Ri?=
 =?utf-8?B?c29CUVJrUkljMW16QjR3b1B0WmJGeC9yVldrZk5SakFlNDJtZTIrQVc3cVRJ?=
 =?utf-8?B?RXYzd3R0TGdnS1hKeHdERnd0bU4wQzBzRS9FSk5pbDRmT1hVaUJEaFlTeUhB?=
 =?utf-8?B?bGZzNE1wN0ZOSU9Dek15T3Y1YmhPeXBGL2wxWUl6bkFGajgzZGlwS3VldHRI?=
 =?utf-8?B?NzBjazJwWGtRUTNqQ1pXTDdHUlh3Zlh1WWtKdVVIUnZLMURiL2pRNEwxSGhh?=
 =?utf-8?B?ZUpvMENyd3M4SXhoK2tVZUluSEsyK1pnVE0vVk92dGhFNHp6QnBaRTBJaVJP?=
 =?utf-8?B?dkRaSm1YOXVCTmRiTGlLSkw2ZENCWk5zVVNBUWZoSWpjS21heklEUHNWTGNZ?=
 =?utf-8?B?L3BRY2JDUFdEbStjY3ZtcEZBQWhlN3VHQWFzQm5JaytvS0crdDBZeTZBRGNH?=
 =?utf-8?B?T3czZWV2TE1hOU90UllsWUIvd2EyTXJsdU0vc2J2emRJelNXUGxid0x0RWJy?=
 =?utf-8?B?K3UvSG9oSGNFWGpQL1hMWkNZaEZYd1VoWEtxaHVDdXNUd2gvaGhzZ2ptRm5O?=
 =?utf-8?B?OFBQWTBPbEI4RWRlUnlCNFIxVTFSL0NNK3FrdDdNZzRJVG9UWis5bTJkbHpB?=
 =?utf-8?B?c3hFZXhvMXJVZVNRZDBYUHE0eUJtb29raUhyMzZsbDhnRzhrSGFtN3hiS3dB?=
 =?utf-8?B?TWdFd1RVWlUwRkxlZ0wxQmkvbGd1M0RWMnhPM0tZNFNZQkpJd3plMTFIYktT?=
 =?utf-8?B?ZEVic2ZWaklLZ2Vld01BUEpmbS9ycE44ZndMUGpwSElGbXRtZS9zYjYrT2Uv?=
 =?utf-8?B?N3hUWEZlYUcvWmc2aGl3dFVqa2gybDlWWDFPWmxEWksza0YwR2ZDbDM0U3ow?=
 =?utf-8?B?M2FXcDZzcUZxZmI0b2RKMjBwSWRDejFZNCtpK0ZaNFNxaEJ4ZFR3YUxRZVpq?=
 =?utf-8?B?SWNXSUZtL2cxQm83WVV0WHpPTU5jK2cwR1hFcFFia2RMeGVhN21iWGd5VXVO?=
 =?utf-8?B?RExqNWFwODMzNjJ5YXA0Wk51MXZSZmY1TmF4bnVwN3BhWE9CdU1oODlGOG9B?=
 =?utf-8?Q?O1ufNPWNBo7OnAM0rYWbhhRE1H60hYpoakPdqyGdSP4V?=
X-OriginatorOrg: cornell.edu
X-MS-Exchange-CrossTenant-Network-Message-Id: 49f4b4b1-c100-4888-3277-08da8b854422
X-MS-Exchange-CrossTenant-AuthSource: BN7PR04MB4388.namprd04.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 31 Aug 2022 19:16:11.8849 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 5d7e4366-1b9b-45cf-8e79-b14b27df46e1
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: DaD0QBedJw0TCOxTjSlycddUgSXSmoxORwDNyVr2frx4iPnqPrARypQryzBsKwA4DHk3ATpa/rNuhDz1Ob1AYg==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO2PR04MB2327
X-Spam-Status: No, score=-3.1 required=5.0 tests=BAYES_00, DKIM_SIGNED,
 DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, JMQ_SPF_NEUTRAL, NICE_REPLY_A,
 RCVD_IN_DNSWL_NONE, RCVD_IN_MSPIKE_H2, SPF_HELO_PASS, SPF_PASS, TXREP,
 T_SCC_BODY_TEXT_LINE autolearn=no autolearn_force=no version=3.4.6
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on
 server2.sourceware.org
X-BeenThere: cygwin AT cygwin DOT com
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Unsubscribe: <https://cygwin.com/mailman/options/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=unsubscribe>
List-Archive: <https://cygwin.com/pipermail/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe: <https://cygwin.com/mailman/listinfo/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="us-ascii"; Format="flowed"
Errors-To: cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com
Sender: "Cygwin" <cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com>

On 8/31/2022 2:42 PM, carbonfiber123irc carbonfiber123irc wrote:
> Hello
> 
> I have experienced the following unexpected default
> behavior when installing cygwin inside my home directory.
> 
> Using the --no-admin option and choosing "just me" in the setup.
> 
> As user1 when installing cygwin to:
> "C:\Users\user1\Downloads\cygwin_test1\"
> 
> Then all the directories and files have the read and execute
> permissions for the "Everyone" SID.
> 
> This means a user2 on the same system can read files inside
> "C:\Users\user1\Downloads\cygwin_test1\home\user1\"
> 
> It also means that user2 can use stuff in the cygwin install
> such as bash, even though I did not intend for that to be available
> to user2.
> 
> The above applies both to the newest cygwin setup from the cygwin
> website as of this writing, and also to the 2.921 setup.
> 
> I have worked around the issue myself by setting the permissions
> manually after the install. So I am just writing this to inform
> you that I found the behavior unexpected, and then you can determine
> if you consider it a bug or not.

Setup displays the following text below the "Just Me" button:

   Cygwin will still be available to all users, but Desktop Icons,
   Cygwin Menu Entries, and important Installer information are
   only available to the current user.  Only select this if you
   lack Administrator privileges or if you have specific needs.

This is consistent with what you observed.

Ken

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple