RE: How about a 64-bit installer that doesn't require UAC?
Denis Excoffier sent the following at Friday, November 08, 2013 1:34 PM >On 2013-11-08 15:01, Shaddy Baddah wrote: >> In my view, this option should only be used by users who understand well >> enough general Windows file permissions, user privileges, etc... >> the general security model, and how Cygwin functions accordingly. > >Well, i would say the reverse >(i.e. elevation is for knowledgeable people), but never mind. > >More importantly, the new -no-admin/-B option is especially beneficial >for users that are not allowed to elevate or that do not know any >Administrator password. Expanding: This option MUST be used by anyone who does not have administrator privileges, regardless of their understanding of [what you said]. I expect that that will prove to be a problem. If one doesn't have an admin password, one can no longer click on the link to setup on www.cygwin.com and just run it. One must download it and run it from the command line with -B. And one needs to know about -B - there's nothing on the Cygwin home page telling us about it. (I spend 15-30 minutes yesterday figuring out that my problem with the new 32-bit setup on Windows 7 Enterprise was that I needed to use -B. I expect a first time user will take longer and this this will result in traffic to this list or people just giving up.) It would be better if the elevation of privileges happened after the GUI is presented so that the user could choose. It could be chosen at the "Install for" screen, defaulting to what appropriate for "Everyone" or "Just me", perhaps with a way to override the default. Sorry, I'm incapable of writing a patch. Having said that, I understand that the elevation problem was an issue for others and I appreciate the effort that went into addressing it. Best wishes, - Barry Disclaimer: Statements made herein are not made on behalf of NIAID. -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
Re: How about a 64-bit installer that doesn't require UAC?
On 2013-11-08 15:01, Shaddy Baddah wrote: > In my view, this option should only be used by users who understand well > enough general Windows file permissions, user privileges, etc... > the general security model, and how Cygwin functions accordingly. Well, i would say the reverse (i.e. elevation is for knowledgeable people), but never mind. More importantly, the new —no-admin/-B option is especially beneficial for users that are not allowed to elevate or that do not know any Administrator password. Denis Excoffier. -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
Re: How about a 64-bit installer that doesn't require UAC?
Hi, On 04/11/13 22:53, Corinna Vinschen wrote: On Nov 3 14:13, Bill Welch wrote: My apologies for the snark. The list archive ends at the same message as the top of the second page of the nabble rendering and I didn't immediately see the additional messages in nabble that include a workaround. Setup should work for admins in the first place, without having to remember explicit elevating every time. To fix this for the 64 bit version, the best solution is not just to remove the "require admin" manifest. Instead, there's a patch in the loop which allows setup to elevate itself. It's just not ready for prime time yet. I am happy to say that my patch has been accepted, and is ready for prime time. I understand the latest version of setup on http://www.cygwin.com/ includes this patch. As Corinna describes, the manifests for setup (both x86 and x86_64) no longer "require admin". Instead setup will "require admin" at runtime for Vista and above, but only as the default behaviour. This behaviour can be overridden via the --no-admin/-B argument to setup.exe. As suggested, setup will not attempt to elevate to admin given that option, and will just run as the invoking user. In my view, this option should only be used by users who understand well enough general Windows file permissions, user privileges, etc... the general security model, and how Cygwin functions accordingly. -- Regards, Shaddy -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
Re: How about a 64-bit installer that doesn't require UAC?
On Nov 4 10:59, Christopher Faylor wrote: > On Mon, Nov 04, 2013 at 12:53:43PM +0100, Corinna Vinschen wrote: > >On Nov 3 14:13, Bill Welch wrote: > >> My apologies for the snark. The list archive ends at the same > >> message as the top of the second page of the nabble rendering and I > >> didn't immediately see the additional messages in nabble that > >> include a workaround. > > > >Setup should work for admins in the first place, without having to > >remember explicit elevating every time. To fix this for the 64 bit > >version, the best solution is not just to remove the "require admin" > >manifest. Instead, there's a patch in the loop which allows setup to > >elevate itself. It's just not ready for prime time yet. > > So, probably the Thursday after next, cat-dependent? If Shaddy is a cat person, yes. Corinna -- Corinna Vinschen Please, send mails regarding Cygwin to Cygwin Maintainer cygwin AT cygwin DOT com Red Hat pgp5RkuPEgt2n.pgp Description: PGP signature
Re: How about a 64-bit installer that doesn't require UAC?
On Mon, Nov 04, 2013 at 12:53:43PM +0100, Corinna Vinschen wrote: >On Nov 3 14:13, Bill Welch wrote: >> My apologies for the snark. The list archive ends at the same >> message as the top of the second page of the nabble rendering and I >> didn't immediately see the additional messages in nabble that >> include a workaround. > >Setup should work for admins in the first place, without having to >remember explicit elevating every time. To fix this for the 64 bit >version, the best solution is not just to remove the "require admin" >manifest. Instead, there's a patch in the loop which allows setup to >elevate itself. It's just not ready for prime time yet. So, probably the Thursday after next, cat-dependent? cgf -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
Re: How about a 64-bit installer that doesn't require UAC?
On Nov 3 14:13, Bill Welch wrote: > My apologies for the snark. The list archive ends at the same > message as the top of the second page of the nabble rendering and I > didn't immediately see the additional messages in nabble that > include a workaround. Setup should work for admins in the first place, without having to remember explicit elevating every time. To fix this for the 64 bit version, the best solution is not just to remove the "require admin" manifest. Instead, there's a patch in the loop which allows setup to elevate itself. It's just not ready for prime time yet. Corinna -- Corinna Vinschen Please, send mails regarding Cygwin to Cygwin Maintainer cygwin AT cygwin DOT com Red Hat pgpSBPJNmpT3r.pgp Description: PGP signature
Re: How about a 64-bit installer that doesn't require UAC?
My apologies for the snark. The list archive ends at the same message as the top of the second page of the nabble rendering and I didn't immediately see the additional messages in nabble that include a workaround. On 2013-11-02 18:28, Andrey Repin wrote: Greetings, Bill Welch! Yes, I could try to change the application manifest myself, but that seems esoteric and I haven't been able to find any GPL tool. I suggest you use search before posting. This has been discussed already. The real solution would be a tool that run in postinstall scripts and can prompt user for privilege elevation, but noone had time or inclination to write one. Yet. -- WBR, Andrey Repin (anrdae...@yandex.ru) 03.11.2013, <02:26> Sorry for my terrible english... -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
Re: How about a 64-bit installer that doesn't require UAC?
I presume you're referring to http://cygwin.1069669.n5.nabble.com/cannot-run-setup64-exe-without-admin-privileges-even-if-renamed-foo-exe-td102712.html, where the final (official cygwin, apparently) word is that you think cygwin users are too stupid to be allowed a choice in 64-bit, that they have in 32-bit, no matter how locked down and single user their corporate machine might be. Thanks. On 2013-11-02 18:28, Andrey Repin wrote: Greetings, Bill Welch! Yes, I could try to change the application manifest myself, but that seems esoteric and I haven't been able to find any GPL tool. I suggest you use search before posting. This has been discussed already. The real solution would be a tool that run in postinstall scripts and can prompt user for privilege elevation, but noone had time or inclination to write one. Yet. -- WBR, Andrey Repin (anrdae...@yandex.ru) 03.11.2013, <02:26> Sorry for my terrible english... -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
Re: How about a 64-bit installer that doesn't require UAC?
Greetings, All! > The real solution would be a tool that run in postinstall scripts and can > prompt user for privilege elevation, but noone had time or inclination to > write one. Yet. This got me to think... An alternation of env command with appropriate manifest would be sufficient. -- WBR, Andrey Repin (anrdae...@yandex.ru) 03.11.2013, <02:50> Sorry for my terrible english... -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
Re: How about a 64-bit installer that doesn't require UAC?
Greetings, Bill Welch! > Yes, I could try to change the application manifest myself, but that > seems esoteric and I haven't been able to find any GPL tool. I suggest you use search before posting. This has been discussed already. The real solution would be a tool that run in postinstall scripts and can prompt user for privilege elevation, but noone had time or inclination to write one. Yet. -- WBR, Andrey Repin (anrdae...@yandex.ru) 03.11.2013, <02:26> Sorry for my terrible english... -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
