Re: cygwin=ntsec:[no]strict

[Christopher Faylor <cgf at redhat dot com>]

On Thu, Feb 27, 2003 at 10:48:44PM -0500, Pierre A. Humblet wrote:
>At 10:26 PM 2/27/2003 -0500, Christopher Faylor wrote:
>>I was wondering if it would make sense to have cygwin default to
>>a somewhat looser interpretation of POSIX correctness wrt protections.
>>I was considering that maybe a file with a .exe, .bat, .cmd extension
>>should always be considered executable regardless of protection.
>
>I would refrain from doing any such thing until both:
>- 1.3.21 is out. Unfortunately 1.3.20 has a bug that degrades the mapping
>  between acl and permissions, for files created by non-ntsec programs 
>  (such as setup). Also sh "test" (and soon bash and /bin/test (?)) will
>  reflect the *true* permissions in 1.3.21. 

I'll release a version of sh-utils shortly.

>- The new setup is out, with my ntsec patch. That will greatly alleviate
>  the problem you describe in the next paragraph.

I was getting the feeling that Robert thought there was no pressing
need for a new setup to be released.  It sounds like this is a pressing
need.

>>It seems like we are consistently confusing people who, after an
>>install, find that their programs are not considered to be executable by
>>cygwin.  I'm not sure why this is happening (does someone understand this?)
>
>Yes, but there are several cases. The main one is that on many systems
>the default ACL gives no permissions for Everyone, and in exchange the
>permissions are wide for Users. However that is not reflected in the
>permissions bits because the file group is None, and the ACL gives no access
>to None either.
>
>The stock answer should be to chmod +x the entire tree.

Yes but, the more important stock question is "Why doesn't this just
work?"  Any user would have the right to assume that after running setup
they'd have a usable system.  There are probably very many people out
there who just give up on cygwin because it doesn't work after first
installation.  The cygwin mailing list has got to be the tip of the
iceberg.  That's really doing them and us a disservice.

We have *got* to fix this problem.  I think it's giving cygwin a black
eye.

cgf