Re: Permissions on /var

[Corinna Vinschen]

On Oct 28 18:00, Jan Bruun Andersen wrote:
> Looks good. No errors are reported on my end now.

Thanks for testing.


Corinna

> 
> On 28 October 2015 at 14:28, Corinna Vinschen  
> wrote:
> > On Oct 28 01:33, Jan Bruun Andersen wrote:
> >> Today, as I installed inetutils (I needed telnet for Cygwin; telnet
> >> for Windows 10 does nothing; no error, no nothing) I got an error from
> >> setup-084_64. The error message directed me to look at
> >> /var/log/setup.log.full. Here is the relevant part, very near the end:
> >> [...]
> >> I tracked the check down to a function in
> >> /usr/share/csih/cygwin-service-installation-helper.sh. It checks the
> >> permissions with a call to function csih_check_dir_perms which ends up
> >> doing this:
> >
> > I just (belatedly) released a new version of the csih package, 0.9.9-1,
> > which is supposed to fix this installation problem.
> >
> >
> > HTH,
> > Corinna

-- 
Corinna Vinschen  Please, send mails regarding Cygwin to
Cygwin Maintainer cygwin AT cygwin DOT com
Red Hat


pgpFQbjRhKiiP.pgp
Description: PGP signature

Re: Permissions on /var

[Corinna Vinschen]

On Oct 28 01:33, Jan Bruun Andersen wrote:
> Today, as I installed inetutils (I needed telnet for Cygwin; telnet
> for Windows 10 does nothing; no error, no nothing) I got an error from
> setup-084_64. The error message directed me to look at
> /var/log/setup.log.full. Here is the relevant part, very near the end:
> [...]
> I tracked the check down to a function in
> /usr/share/csih/cygwin-service-installation-helper.sh. It checks the
> permissions with a call to function csih_check_dir_perms which ends up
> doing this:

I just (belatedly) released a new version of the csih package, 0.9.9-1,
which is supposed to fix this installation problem.


HTH,
Corinna

-- 
Corinna Vinschen  Please, send mails regarding Cygwin to
Cygwin Maintainer cygwin AT cygwin DOT com
Red Hat


pgpItfBbQagip.pgp
Description: PGP signature

Re: Permissions on /var

[Jan Bruun Andersen]

Looks good. No errors are reported on my end now.

On 28 October 2015 at 14:28, Corinna Vinschen  wrote:
> On Oct 28 01:33, Jan Bruun Andersen wrote:
>> Today, as I installed inetutils (I needed telnet for Cygwin; telnet
>> for Windows 10 does nothing; no error, no nothing) I got an error from
>> setup-084_64. The error message directed me to look at
>> /var/log/setup.log.full. Here is the relevant part, very near the end:
>> [...]
>> I tracked the check down to a function in
>> /usr/share/csih/cygwin-service-installation-helper.sh. It checks the
>> permissions with a call to function csih_check_dir_perms which ends up
>> doing this:
>
> I just (belatedly) released a new version of the csih package, 0.9.9-1,
> which is supposed to fix this installation problem.
>
>
> HTH,
> Corinna
>
> --
> Corinna Vinschen  Please, send mails regarding Cygwin to
> Cygwin Maintainer cygwin AT cygwin DOT com
> Red Hat

--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple

Permissions on /var

[Jan Bruun Andersen]

Today, as I installed inetutils (I needed telnet for Cygwin; telnet
for Windows 10 does nothing; no error, no nothing) I got an error from
setup-084_64. The error message directed me to look at
/var/log/setup.log.full. Here is the relevant part, very near the end:

2015/10/28 00:55:10 running: C:\cygwin64\bin\dash.exe
"/etc/postinstall/0p_000_autorebase.dash"
cat: /var/lib/rebase/dynpath.d/*: No such file or directory
Updating package information in /var/cache/rebase/rebase_pkg.
from /etc/setup/inetutils-server.lst.gz...
from /etc/setup/inetutils.lst.gz...
Updating rebase information for installed dynamic objects in
/var/cache/rebase/rebase_lst.
Updating rebase information for installed executables in
/var/cache/rebase/rebase_exe.
removing /var/cache/rebase/rebase_dyn
creating empty /var/cache/rebase/rebase_dyn
Updating rebase information for user-defined dynamic objects
/var/cache/rebase/rebase_user.
Updating rebase information for user-defined executables
/var/cache/rebase/rebase_user_exe.
Rebasing with list /var/cache/rebase/rebase_all, built from
/var/cache/rebase/rebase_lst /var/cache/rebase/rebase_dyn
/var/cache/rebase/rebase_user.
2015/10/28 00:55:17 running: C:\cygwin64\bin\bash.exe --norc
--noprofile "/etc/postinstall/inetutils-server.sh"
*** Warning: The permissions on the directory /var are not correct.
*** Warning: They must match the regexp d..x..x..[xt]
*** ERROR: Problem with /var directory. Exiting.
*** Warning: The permissions on the directory /var are not correct.
*** Warning: They must match the regexp d..x..x..[xt]
*** ERROR: Problem with /var directory. Exiting.
2015/10/28 00:55:20 abnormal exit: exit code=1
2015/10/28 00:55:20 Changing gid to Administrators
Program directory for program link:
C:\ProgramData\Microsoft\Windows\Start Menu\Programs
Desktop directory for desktop link: C:\Users\Public\Desktop
Desktop directory for desktop link: C:\Users\Public\Desktop
make_link C:\Users\Public\Desktop/Cygwin64 Terminal.lnk, Cygwin64
Terminal, C:\cygwin64\bin\mintty
make_link_2 (C:\cygwin64\bin\mintty, -i /Cygwin-Terminal.ico -,
C:\cygwin64\Cygwin-Terminal.ico, C:\Users\Public\Desktop/Cygwin64
Terminal.lnk)
2015/10/28 00:55:27 note: Installation Complete
2015/10/28 00:55:27 Ending cygwin install

I tracked the check down to a function in
/usr/share/csih/cygwin-service-installation-helper.sh. It checks the
permissions with a call to function csih_check_dir_perms which ends up
doing this:

2162   if /usr/bin/stat -c "%A" "$1" | /usr/bin/grep -Eq ^"$2"
2163   then
2164 true
2165   else
2166 csih_warning "The permissions on the directory $1 are not correct."
2167 csih_warning "They must match the regexp $2"
2168 return 1
2169   fi

Doing a manual check, /usr/bin/stat -c "%A" /var, confirms that the
permissions are indeed wrong:

$ /usr/bin/stat -c "%A" /var
drwx---r-x

Group-permissions are empty.

Now, as a coincidence, I have a month-old copy of a previous Cygwin
installation on an external disk. This is the permissions on the old
Cygwin:

$ ls -lg /g/cygwin64/
total 513
drwxr-xr-x+ 1 Unknown+Group0 Sep 25 15:22 bin
-rwxr-xr-x  1 Administratörer 59 Sep 12 00:03 Cygwin.bat
-rw-r--r--  1 Administratörer 157097 Sep 12 00:03 Cygwin.ico
-rw-r--r--  1 Administratörer  53342 Sep 12 00:03 Cygwin-Terminal.ico
drwxr-xr-x+ 1 Unknown+Group0 Sep 12 00:03 dev
drwxr-xr-x+ 1 Unknown+Group0 Sep 30 13:42 etc
drwxrwxrwt+ 1 Unknown+Group0 Sep 12 02:30 home
drwxr-xr-x+ 1 Unknown+Group0 Sep 25 15:22 lib
drwxr-xr-x+ 1 Unknown+Group0 Sep 12 00:02 sbin
drwxrwxrwt+ 1 Unknown+Group0 Sep 30 13:30 tmp
drwxr-xr-x+ 1 Unknown+Group0 Sep 18 20:19 usr
drwxr-xr-x+ 1 Unknown+Group0 Sep 12 00:02 var

And here is my current install:

$ ls -lg /c/cygwin64/
total 621
drwx---r-x+ 1 jabba0 Oct 28 00:55 bin
-rwxr-xr-x+ 1 jabba   71 Oct 26 00:48 Cygwin.bat
-rw-r--r--  1 Administratörer 157097 Oct 26 00:16 Cygwin.ico
-rw-r--r--  1 Administratörer  53342 Oct 26 00:16 Cygwin-Terminal.ico
drwx---r-x+ 1 jabba0 Oct 26 00:15 dev
drwx---r-x+ 1 jabba0 Oct 28 00:55 etc
drwx---rwt+ 1 jabba0 Oct 26 00:17 home
drwx---r-x+ 1 jabba0 Oct 27 18:37 lib
drwx---r-x+ 1 jabba0 Oct 26 00:26 sbin
drwx---rwt+ 1 jabba0 Oct 28 00:55 tmp
drwx---r-x+ 1 jabba0 Oct 27 17:33 usr
drwx---r-x+ 1 jabba0 Oct 27 18:37 var

As you can see, group-permissions is empty on a lot of the directories.

I don't know if it is relevant, but the old install is from a Windows
7 that was part of an AD-domain. The new install is my from my private
PC with Windows 10 Pro that (only) is part of a workgroup.

I guess I can just go ahead and give the group r-x permissions on /var
but I would be interested in knowing if this is a local probl

Messed up permissions on /var ?

[David Lee Lambert]

I recently migrated a Cygwin instance from Windows XP to Windows 7
(wanted to save a bit of external bandwidth versus running the
installer again, also had a lot of custom stuff under /usr/local and
so forth).  X works fine.  I can't get sshd to work (started as a
daemon it would present a host key but not accept any password to log
in),  and I suspect I may have made things worse trying to fix it.

Trying to run the SSH daemon from a Cygwin command prompt started with
Run as administrator..., I get the following output...

$ /usr/sbin/sshd -ddd
debug2: load_server_config: filename /etc/sshd_config
debug2: load_server_config: done config len = 253
debug2: parse_server_config: config /etc/sshd_config len 253
debug3: /etc/sshd_config:13 setting Port 22
debug3: /etc/sshd_config:41 setting StrictModes no
debug3: /etc/sshd_config:50 setting AuthorizedKeysFile .ssh/authorized_keys
debug3: /etc/sshd_config:102 setting UsePrivilegeSeparation sandbox
debug3: /etc/sshd_config:118 setting Subsystem sftp /usr/sbin/sftp-server
debug1: sshd version OpenSSH_6.2, OpenSSL 1.0.1e 11 Feb 2013
debug3: Incorrect RSA1 identifier
debug1: read PEM private key done: type RSA
debug1: private host key: #0 type 1 RSA
debug3: Incorrect RSA1 identifier
debug1: read PEM private key done: type DSA
debug1: private host key: #1 type 2 DSA
debug3: Incorrect RSA1 identifier
debug1: read PEM private key done: type ECDSA
debug1: private host key: #2 type 3 ECDSA
/var/empty must be owned by root and not group or world-writable.


From that same terminal here are the permissions on /var and /var/empty...

dllamber@IBM-635c7e0ffd0 /var
$ ls -ld /var /var/empty
drwx---r-x+ 1 Administrator None 0 Aug  8 11:26 /var
drwxr-xr-x+ 1 SYSTEMNone 0 Aug  8 07:16 /var/empty

From my regular user account, Cygwin terminal, here's what I get:

dllamber@IBM-635c7e0ffd0 ~
$ ls -l /var /var/empty
ls: cannot open directory /var: Permission denied
/var/empty:
total 0


From cmd.exe run with Run as administrator... here's what I see...

C:\Cygwincacls var
C:\Cygwin\var IBM-635C7E0FFD0\Administrator:F
  IBM-635C7E0FFD0\None:(DENY)(special access:)
   FILE_READ_DATA
   FILE_READ_EA
   FILE_EXECUTE

  IBM-635C7E0FFD0\None:(special access:)
   READ_CONTROL
   SYNCHRONIZE
   FILE_READ_ATTRIBUTES

  Everyone:R
  IBM-635C7E0FFD0\dllamber:(OI)(CI)R


C:\Cygwincacls var\empty
Access is denied.


From cmd.exde run as a regular user, I see exactly the same thing.

If I open Explorer and try to browse to C:\Cygwin\var, I get a You
don't currently have permissions to access this folder dialog.  If I
hit Continue and enter my password for UAC, I get You have been
denied permission to access this folder.


Any advice?


-- 
David L. Lambert
Member IEEE, ACM (david.lee.lamb...@acm.org)
IM: davidleelambert (Yahoo!) or lambe...@cse.msu.edu (MSN)

--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple

Re: Messed up permissions on /var ?

[Balaji Venkataraman]

On Thu, Aug 8, 2013 at 8:39 AM, David Lee Lambert dav...@lmert.com wrote:

 I recently migrated a Cygwin instance from Windows XP to Windows 7
 (wanted to save a bit of external bandwidth versus running the
 installer again, also had a lot of custom stuff under /usr/local and
 so forth).  X works fine.  I can't get sshd to work (started as a
 daemon it would present a host key but not accept any password to log

I ran into some ssh(d) related problems when I migrated laptops (older
ssd w/ Cygwin32 on Win7 migrated to an almost identical build but
fresh install of Win7 on a larger SSD) and copied all of my Cygwin
stuff over w/o re-installing. My problem was that sshd would start but
I could never connect to it.

 From that same terminal here are the permissions on /var and /var/empty...

 dllamber@IBM-635c7e0ffd0 /var
 $ ls -ld /var /var/empty
 drwx---r-x+ 1 Administrator None 0 Aug  8 11:26 /var
 drwxr-xr-x+ 1 SYSTEMNone 0 Aug  8 07:16 /var/empty

 From my regular user account, Cygwin terminal, here's what I get:

 dllamber@IBM-635c7e0ffd0 ~
 $ ls -l /var /var/empty
 ls: cannot open directory /var: Permission denied
 /var/empty:
 total 0

AFAIK, /var/empty should be owned by cyg_server. Delete the /var/empty
directory.

 Any advice?

/usr/share/doc/Cygwin/openssh.README
I'm guessing you already tried re-running /usr/bin/ssh-host-config on
the new system?

Here are some things I did to get it working - delete the cyg_server
and sshd users from Windows' Local Users and Groups (in case it is
already there) - in your case since it's a new install, it might not
be there. Delete cyg_server from /etc/passwd in case it's there.
Possibly re-start (don't think this is required). Then re-run
ssh-host-config and try again.

HTH,
Balaji

--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple

Re: Messed up permissions on /var ?

[Larry Hall (Cygwin)]

On 8/8/2013 11:39 AM, David Lee Lambert wrote:

I recently migrated a Cygwin instance from Windows XP to Windows 7
(wanted to save a bit of external bandwidth versus running the
installer again, also had a lot of custom stuff under /usr/local and
so forth).  X works fine.  I can't get sshd to work (started as a
daemon it would present a host key but not accept any password to log
in),  and I suspect I may have made things worse trying to fix it.

Trying to run the SSH daemon from a Cygwin command prompt started with
Run as administrator...,


Oh, please don't do that!  You can't just start 'sshd' from the command-line
from your ID (or as administrator) the way you can on Linux/UNIX.
Unfortunately, this is a common misunderstanding when trying to debug
'sshd' problems on Windows.  But doing this sets permissions on files
and directories used by 'sshd' so that only your user can run it.  That
means you cannot run it as a service under the properly configured
'cyg_server' account, so pubkey authentication won't work.  As a
consolation, it's quite likely the permissions on the important files
and directories were already 'hosed' as a result of the copy.

Try these options, in order of relative ease, to try to recover:

  1. Run 'ssh-host-config' and 'ssh-user-config'.

  2. Remove users 'sshd' and 'cyg_server' from '/etc/passwd' and delete
 the sshd service (cygrunsrv -E sshd; cygrunsrv -R sshd).  Then
 run 'ssh-host-config' and 'ssh-user-config'.

  3. Install via 'setup*.exe' to a new location and then copy in the
 bits you want.  Use 'ssh-host-config' to configure 'sshd' and
 'ssh-user-config' to configure your user files.

--
Larry

_

A: Yes.
 Q: Are you sure?
 A: Because it reverses the logical flow of conversation.
 Q: Why is top posting annoying in email?

--
Problem reports:   http://cygwin.com/problems.html
FAQ:   http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info:  http://cygwin.com/ml/#unsubscribe-simple