Re: Bug: Windows installer modifies ACLs on the whole volume

I remember last time we fixed a bug in initcluster.vbs. There was a typo
which caused icacls to run on system drive. Let me nail down this issue
completely. I'm on it.

On Fri, Jan 11, 2013 at 9:28 AM, Craig Ringer <craig(at)2ndquadrant(dot)com> wrote:

> On 01/09/2013 05:10 PM, emergency(dot)shower(at)gmail(dot)com wrote:
> > One click installer postgresql-9.2.2-1-windows-x64.exe from
> > http://www.postgresql.org/download/windows/.
> >
> > Start the installer from "D:\downloads", choose "C:\Program
> > Files\PostgreSQL\9.2" as binary directory, and
> > "D:\db\postgresql\9.2\data" as the data directory.
> >
> > The installer runs for > 1 hour (actually it had not finished yet).
> > While doing so, it starts ICACLS child processes that modify ACLs of
> > every directory (and file?) on the D:\ volume:
> >
> > icacls D:\ /grant "UserName":(NP)(RX)
> > ...
> > icacls D:\ /grant "NT AUTHORITY\NetworkService":(NP)(RX)
> > ...
> I see periodic reports of this issue, but I don't think it's ever been
> conclusively solved. I seem to recall discussion suggesting the cause
> had been found a while ago, but you're on the latest release so this
> isn't just an old in-installer-version issue.
>
> It'd be helpful to have a full list of installed software, service
> packs, etc, along with the exact Windows version.
>
> I've CC'd Sandeep at EnterpriseDB, who IIRC is looking after the
> installer at the moment.
>
> --
> Craig Ringer http://www.2ndQuadrant.com/
> PostgreSQL Development, 24x7 Support, Training & Services
>
>

--
Sandeep Thakkar
Senior Software Engineer
EnterpriseDB Corporation
The Enterprise Postgres Company
Phone: +91.20.30589523

Website: www.enterprisedb.com
EnterpriseDB Blog: http://blogs.enterprisedb.com/
Follow us on Twitter: http://www.twitter.com/enterprisedb

This e-mail message (and any attachment) is intended for the use of the
individual or entity to whom it is addressed. This message contains
information from EnterpriseDB Corporation that may be privileged,
confidential, or exempt from disclosure under applicable law. If you are
not the intended recipient or authorized to receive this for the intended
recipient, any use, dissemination, distribution, retention, archiving, or
copying of this communication is strictly prohibited. If you have received
this e-mail in error, please notify the sender immediately by reply e-mail
and delete this message.