This is the mail archive of the
cygwin
mailing list for the Cygwin project.
Re: (call-process ...) hangs in emacs
- From: Ken Brown <kbrown at cornell dot edu>
- To: cygwin at cygwin dot com
- Date: Fri, 29 Aug 2014 17:38:54 -0400
- Subject: Re: (call-process ...) hangs in emacs
- Authentication-results: sourceware.org; auth=none
- References: <87wq9v9j2y dot fsf at Rainer dot invalid> <53FD0662 dot 5050208 at cornell dot edu> <20140827084245 dot GD20700 at calimero dot vinschen dot de> <53FDD4A8 dot 5050401 at cornell dot edu> <loom dot 20140827T170804-533 at post dot gmane dot org> <loom dot 20140828T085927-71 at post dot gmane dot org> <20140828095524 dot GO20700 at calimero dot vinschen dot de> <20140828131832 dot GT20700 at calimero dot vinschen dot de> <loom dot 20140828T172529-396 at post dot gmane dot org> <loom dot 20140829T115632-276 at post dot gmane dot org> <20140829110938 dot GD20700 at calimero dot vinschen dot de> <5400C19D dot 4070408 at cornell dot edu> <87ha0vhzge dot fsf at Rainer dot invalid> <5400D64D dot 1090709 at cornell dot edu> <87d2bjhxqx dot fsf at Rainer dot invalid>
On 8/29/2014 4:00 PM, Achim Gratz wrote:
> Ken Brown writes:
>> I just checked /var/log/sshd.log. (I hadn't thought to do that
>> before.) The last message in it is, "/var/empty must be owned by root
>> and not group or world-writable." So the problem seems to be that
>> /var/empty appears to sshd to be group writable under the latest
>> snapshot. This is the "downside" that Corinna mentioned. What needs
>> to be done to /var/empty to fix this?
>
> You need to remove all ACL from the directory, either with setfacl or
> (from cmd) icacls or even the security tab in Explorer. Most likely
> these are inherited from the parent directory of the Cygwin
> installation.
The ACLs aren't inherited. They're explicitly set by ssh-host-config:
if ! /usr/bin/setfacl -m u:system:rwx "${LOCALSTATEDIR}/empty" >/dev/null 2>&1
then
csih_warning "Can't set extended permissions on ${LOCALSTATEDIR}/empty!"
let ++warning_cnt
fi
This must be done for a reason, but I don't know what it is.
Ken
--
Problem reports: http://cygwin.com/problems.html
FAQ: http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple