Re: BUG #6652: Installer grants postgres user rights for the whole disk, not specified subfolder - Mailing list pgsql-bugs

From Dave Page
Subject Re: BUG #6652: Installer grants postgres user rights for the whole disk, not specified subfolder
Date
Msg-id CA+OCxow_P2o7H0jxKCXPRNE=7zfrgnK+fk_PxnSEXcc6KBaV7w@mail.gmail.com
Whole thread Raw
In response to Re: BUG #6652: Installer grants postgres user rights for the whole disk, not specified subfolder  (Alvaro Herrera <alvherre@commandprompt.com>)
Responses Re: BUG #6652: Installer grants postgres user rights for the whole disk, not specified subfolder
Re: BUG #6652: Installer grants postgres user rights for the whole disk, not specified subfolder
List pgsql-bugs
On Sun, May 20, 2012 at 7:05 PM, Alvaro Herrera
<alvherre@commandprompt.com> wrote:
>
> Excerpts from grv87's message of s=E1b may 19 10:28:47 -0400 2012:
>> The following bug has been logged on the website:
>>
>> Bug reference: =A0 =A0 =A06652
>> Logged by: =A0 =A0 =A0 =A0 =A0Basil Peace
>> Email address: =A0 =A0 =A0grv87@yandex.ru
>> PostgreSQL version: 9.1.3
>> Operating system: =A0 Windows 7 x64
>> Description:
>>
>> I have been installing PostgreSQL 9.1.3.2, and I've noted that 'creating
>> database cluster' is too long. I have been waiting for a half of hour, a=
nd
>> it hasn't finished.
>> I've noted that installer calls icacls.exe with arguments:
>> D:\ /grant "postgres":RX
>
> This seems to be reported every once in a while. =A0It looks like the
> one-clunk installer is to blame. =A0Maybe it's been fixed in some more
> recent version -- Dave Page would probably know.

Just as an FYI, we are working on this. We've been able to reproduce
it, and it appears that icacls (a Microsoft utility) will sometimes
look at the ACL of every file/directory recursively when it grants the
required privileges on higher level directories. The good news is that
in none of the test we've done has it ever modified the ACL on the
wrong thing - it just takes a long time if there are a lot of items on
the filesystem. We've looked at third party alternatives to icacls,
and they seem to exhibit similar traits. We're also going to look into
other ways around the root problem.

--=20
Dave Page
Blog: http://pgsnake.blogspot.com
Twitter: @pgsnake

EnterpriseDB UK: http://www.enterprisedb.com
The Enterprise PostgreSQL Company

pgsql-bugs by date:

Previous
From: Tom Lane
Date:
Subject: Re: control character check in JSON type seems broken
Next
From: Alvaro Herrera
Date:
Subject: Re: BUG #6652: Installer grants postgres user rights for the whole disk, not specified subfolder