This is an automated email from the ASF dual-hosted git repository.
markt pushed a commit to branch 9.0.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/9.0.x by this push:
new 28726cc2e6 Use the full path when calling icacls.exe
28726cc2e6 is described below
commit 28726cc2e63bed68771f5eb0f65a78dc70805718
Author: Mark Thomas <[email protected]>
AuthorDate: Wed Jun 4 11:12:00 2025 +0100
Use the full path when calling icacls.exe
---
res/install-win/tomcat.nsi | 6 +++---
webapps/docs/changelog.xml | 4 ++++
2 files changed, 7 insertions(+), 3 deletions(-)
diff --git a/res/install-win/tomcat.nsi b/res/install-win/tomcat.nsi
index f889702c49..b525eff7c8 100644
--- a/res/install-win/tomcat.nsi
+++ b/res/install-win/tomcat.nsi
@@ -379,7 +379,7 @@ Section -post
; S-1-5-11 Authenticated users
;
; Grant admins, LocalService and Local System full control full control
- nsExec::ExecToStack 'icacls "$INSTDIR" /inheritance:r /grant
*S-1-5-19:(OI)(CI)(F) /grant *S-1-5-32-544:(OI)(CI)(F) /grant
*S-1-5-18:(OI)(CI)(F)'
+ nsExec::ExecToStack '$SYSDIR\icacls "$INSTDIR" /inheritance:r /grant
*S-1-5-19:(OI)(CI)(F) /grant *S-1-5-32-544:(OI)(CI)(F) /grant
*S-1-5-18:(OI)(CI)(F)'
Pop $0
Pop $1
StrCmp $0 "0" SetGroupPermissionsOk
@@ -392,7 +392,7 @@ Section -post
ClearErrors
; Make the icon readable to all authenticated users so it appears correctly
in the uninstall UI
- nsExec::ExecToStack 'icacls "$INSTDIR\tomcat.ico" /inheritance:e /grant
*S-1-5-11:(R)'
+ nsExec::ExecToStack '$SYSDIR\icacls "$INSTDIR\tomcat.ico" /inheritance:e
/grant *S-1-5-11:(R)'
Pop $0
Pop $1
StrCmp $0 "0" SetIconPermissionsOk
@@ -405,7 +405,7 @@ Section -post
ClearErrors
; Make the uninstaller readable and executable to all authenticated users so
the user that installed Tomcat can also uninstall it
- nsExec::ExecToStack 'icacls "$INSTDIR\Uninstall.exe" /inheritance:e /grant
*S-1-5-11:(RX)'
+ nsExec::ExecToStack '$SYSDIR\icacls "$INSTDIR\Uninstall.exe" /inheritance:e
/grant *S-1-5-11:(RX)'
Pop $0
Pop $1
StrCmp $0 "0" SetUninstallerPermissionsOk
diff --git a/webapps/docs/changelog.xml b/webapps/docs/changelog.xml
index c56951eabc..ae36ffc77e 100644
--- a/webapps/docs/changelog.xml
+++ b/webapps/docs/changelog.xml
@@ -193,6 +193,10 @@
<code>service.bat</code>. Pull request provided by Markus Hoffrogge.
(markt)
</add>
+ <fix>
+ Use the full path when the installer for Windows sets calls
+ <code>icacls.exe</code> to set file permissions. (markt)
+ </fix>
</changelog>
</subsection>
</section>
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]