Network installation still fails, Windows 7 only

Thomas Wolff towo@towo.net
Thu Jun 30 19:05:00 GMT 2016


Am 21.06.2016 um 14:04 schrieb Corinna Vinschen:
> On Jun 21 09:01, Thomas Wolff wrote:
>> I had recently reported that an old network installation problem, that had
>> been resolved meanwhile, reappeared:
>> https://cygwin.com/ml/cygwin-apps/2015-12/msg00012.html
>>
>> As an additional observation, on the same machine, there is also a virtual
>> machine running Windows XP. From that, I can use setup.exe and seamlessly
>> update cygwin which is then also available in the Windows 7 host
>> environment. Running setup.exe from Windows 7 directly still fails with the
>> described symptoms.
>>
>> There must be something weird about interpretation of access rights using
>> the Windows 7 API.
>> As an idea, perhaps someone familiar with setup.exe could check whether at
>> any place access is rejected due to interpretation of access rights without
>> actually trying the access?
> Setup usually doesn't explicitely check access, it only sets ACLs
> POSIX-like.  How does the ACL look like (icacls *and* getfacl output,
> please) it complains about?

------------------------------------------------------------------------
Windows 7:

$ getfacl /etc
# file: /etc
# owner: Administratoren
# group: Domänen-Benutzer
user::rwx
group::r-x
group:SYSTEM:rwx
group:Benutzer:r-x
group:Professoren:rwx
group:Mitarbeiter:rwx
group:Lehrbeauftragte:rwx
mask:rwx
other:r-x
default:user::rwx
default:group::---
default:group:SYSTEM:rwx
default:group:Benutzer:r-x
default:group:Professoren:rwx
default:group:Mitarbeiter:rwx
default:group:Lehrbeauftragte:rwx
default:mask:rwx
default:other:r-x

$ getfacl 'L:\TGI\cygwin'
# file: L:\TGI\cygwin
# owner: wolff
# group: Domänen-Benutzer
user::rwx
group::r-x
other:r-x

$ getfacl 'L:\TGI\cygwin/var/log/setup.log'
# file: L:\TGI\cygwin/var/log/setup.log
# owner: wolff
# group: Domänen-Benutzer
user::rw-
group::r--
other:r--

$ getfacl 'H:\'
# file: H:\
# owner: wolff
# group: Domänen-Benutzer
user::rwx
group::r-x
other:r-x

$ getfacl 'H:\tmp'
# file: H:\tmp
# owner: wolff
# group: Domänen-Benutzer
user::rwx
group::r-x
other:r-x

$ icacls L:/TGI/cygwin/etc
L:/TGI/cygwin/etc VORDEFINIERT\Administratoren:(I)(OI)(CI)(F)
                   NT-AUTORITŽT\SYSTEM:(I)(OI)(CI)(F)
                   ERSTELLER-BESITZER:(I)(OI)(CI)(IO)(F)
                   VORDEFINIERT\Benutzer:(I)(OI)(CI)(RX)
                   Jeder:(I)(OI)(CI)(RX)
                   DIGITALLABOR\Professoren:(I)(OI)(CI)(M,DC)
                   DIGITALLABOR\Mitarbeiter:(I)(OI)(CI)(M,DC)
                   DIGITALLABOR\Lehrbeauftragte:(I)(OI)(CI)(M,DC)

1 Dateien erfolgreich verarbeitet, bei 0 Dateien ist ein Verarbeitungsfehler aufgetreten.

$ icacls L:/TGI/cygwin/var/log/setup.log
L:/TGI/cygwin/var/log/setup.log VORDEFINIERT\Administratoren:(I)(F)
                                 NT-AUTORITŽT\SYSTEM:(I)(F)
                                 VORDEFINIERT\Benutzer:(I)(RX)
                                 Jeder:(I)(RX)
                                 DIGITALLABOR\Professoren:(I)(M,DC)
                                 DIGITALLABOR\Mitarbeiter:(I)(M,DC)
                                 DIGITALLABOR\Lehrbeauftragte:(I)(M,DC)

1 Dateien erfolgreich verarbeitet, bei 0 Dateien ist ein Verarbeitungsfehler aufgetreten.

$ icacls H:/
H:/ VORDEFINIERT\Administratoren:(OI)(CI)(F)
     NT-AUTORITŽT\SYSTEM:(OI)(CI)(F)
     ERSTELLER-BESITZER:(OI)(CI)(IO)(M,DC)
     DIGITALLABOR\Mitarbeiter:(OI)(CI)(M,DC)
     DIGITALLABOR\wolff:(OI)(CI)(M,DC)

1 Dateien erfolgreich verarbeitet, bei 0 Dateien ist ein Verarbeitungsfehler aufgetreten.

$ icacls H:/tmp
H:/tmp VORDEFINIERT\Administratoren:(I)(OI)(CI)(F)
        NT-AUTORITŽT\SYSTEM:(I)(OI)(CI)(F)
        DIGITALLABOR\wolff:(I)(M,DC)
        ERSTELLER-BESITZER:(I)(OI)(CI)(IO)(M,DC)
        DIGITALLABOR\Mitarbeiter:(I)(OI)(CI)(M,DC)
        DIGITALLABOR\wolff:(I)(OI)(CI)(IO)(M,DC)

1 Dateien erfolgreich verarbeitet, bei 0 Dateien ist ein Verarbeitungsfehler aufgetreten.


------------------------------------------------------------------------
Virtual Windows XP:

$ getfacl /etc
# file: /etc
# owner: Administratoren
# group: Domänen-Benutzer
user::rwx
group::r-x
group:SYSTEM:rwx
group:Benutzer:r-x
group:Professoren:rwx
group:Mitarbeiter:rwx
group:Lehrbeauftragte:rwx
mask:rwx
other:r-x
default:user::rwx
default:group::---
default:group:SYSTEM:rwx
default:group:Benutzer:r-x
default:group:Professoren:rwx
default:group:Mitarbeiter:rwx
default:group:Lehrbeauftragte:rwx
default:mask:rwx
default:other:r-x

$ getfacl L:/TGI/cygwin
# file: L:/TGI/cygwin
# owner: wolff
# group: Domänen-Benutzer
user::rwx
group::r-x
other:r-x

$ getfacl L:/TGI/cygwin/var/log/setup.log
# file: L:/TGI/cygwin/var/log/setup.log
# owner: wolff
# group: Domänen-Benutzer
user::rw-
group::r--
other:r--

$ getfacl H:/
# file: H:/
# owner: wolff
# group: Domänen-Benutzer
user::rwx
group::r-x
other:r-x

$ getfacl H:/tmp
# file: H:/tmp
# owner: wolff
# group: Domänen-Benutzer
user::rwx
group::r-x
other:r-x

$ cacls L:/TGI/cygwin
L:\TGI\cygwin VORDEFINIERT\Administratoren:(OI)(CI)F
               NT-AUTORITŽT\SYSTEM:(OI)(CI)F
               ERSTELLER-BESITZER:(OI)(CI)(IO)F
               VORDEFINIERT\Benutzer:(OI)(CI)R
               Jeder:(OI)(CI)R
               DIGITALLABOR\Professoren:(OI)(CI)(Beschr„nkter Zugriff:)
                                                DELETE
                                                READ_CONTROL
                                                SYNCHRONIZE
                                                FILE_GENERIC_READ
                                                FILE_GENERIC_WRITE
                                                FILE_GENERIC_EXECUTE
                                                FILE_READ_DATA
                                                FILE_WRITE_DATA
                                                FILE_APPEND_DATA
                                                FILE_READ_EA
                                                FILE_WRITE_EA
                                                FILE_EXECUTE
                                                FILE_DELETE_CHILD
                                                FILE_READ_ATTRIBUTES
                                                FILE_WRITE_ATTRIBUTES
  
               DIGITALLABOR\Mitarbeiter:(OI)(CI)(Beschr„nkter Zugriff:)
                                                DELETE
                                                READ_CONTROL
                                                SYNCHRONIZE
                                                FILE_GENERIC_READ
                                                FILE_GENERIC_WRITE
                                                FILE_GENERIC_EXECUTE
                                                FILE_READ_DATA
                                                FILE_WRITE_DATA
                                                FILE_APPEND_DATA
                                                FILE_READ_EA
                                                FILE_WRITE_EA
                                                FILE_EXECUTE
                                                FILE_DELETE_CHILD
                                                FILE_READ_ATTRIBUTES
                                                FILE_WRITE_ATTRIBUTES
  
               DIGITALLABOR\Lehrbeauftragte:(OI)(CI)(Beschr„nkter Zugriff:)
                                                    DELETE
                                                    READ_CONTROL
                                                    SYNCHRONIZE
                                                    FILE_GENERIC_READ
                                                    FILE_GENERIC_WRITE
                                                    FILE_GENERIC_EXECUTE
                                                    FILE_READ_DATA
                                                    FILE_WRITE_DATA
                                                    FILE_APPEND_DATA
                                                    FILE_READ_EA
                                                    FILE_WRITE_EA
                                                    FILE_EXECUTE
                                                    FILE_DELETE_CHILD
                                                    FILE_READ_ATTRIBUTES
                                                    FILE_WRITE_ATTRIBUTES
  

$ cacls H:/
H:\ VORDEFINIERT\Administratoren:(OI)(CI)F
     NT-AUTORITŽT\SYSTEM:(OI)(CI)F
     ERSTELLER-BESITZER:(OI)(CI)(IO)(Beschr„nkter Zugriff:)
                                    DELETE
                                    READ_CONTROL
                                    SYNCHRONIZE
                                    FILE_GENERIC_READ
                                    FILE_GENERIC_WRITE
                                    FILE_GENERIC_EXECUTE
                                    FILE_READ_DATA
                                    FILE_WRITE_DATA
                                    FILE_APPEND_DATA
                                    FILE_READ_EA
                                    FILE_WRITE_EA
                                    FILE_EXECUTE
                                    FILE_DELETE_CHILD
                                    FILE_READ_ATTRIBUTES
                                    FILE_WRITE_ATTRIBUTES
  
     DIGITALLABOR\Mitarbeiter:(OI)(CI)(Beschr„nkter Zugriff:)
                                      DELETE
                                      READ_CONTROL
                                      SYNCHRONIZE
                                      FILE_GENERIC_READ
                                      FILE_GENERIC_WRITE
                                      FILE_GENERIC_EXECUTE
                                      FILE_READ_DATA
                                      FILE_WRITE_DATA
                                      FILE_APPEND_DATA
                                      FILE_READ_EA
                                      FILE_WRITE_EA
                                      FILE_EXECUTE
                                      FILE_DELETE_CHILD
                                      FILE_READ_ATTRIBUTES
                                      FILE_WRITE_ATTRIBUTES
  
     DIGITALLABOR\wolff:(OI)(CI)(Beschr„nkter Zugriff:)
                                DELETE
                                READ_CONTROL
                                SYNCHRONIZE
                                FILE_GENERIC_READ
                                FILE_GENERIC_WRITE
                                FILE_GENERIC_EXECUTE
                                FILE_READ_DATA
                                FILE_WRITE_DATA
                                FILE_APPEND_DATA
                                FILE_READ_EA
                                FILE_WRITE_EA
                                FILE_EXECUTE
                                FILE_DELETE_CHILD
                                FILE_READ_ATTRIBUTES
                                FILE_WRITE_ATTRIBUTES

------------------------------------------------------------------------



More information about the Cygwin-apps mailing list