Thread: Bug: Windows installer modifies ACLs on the whole volume

Bug: Windows installer modifies ACLs on the whole volume

From
"emergency.shower@gmail.com"
Date:
One click installer postgresql-9.2.2-1-windows-x64.exe from
http://www.postgresql.org/download/windows/.

Start the installer from "D:\downloads", choose "C:\Program
Files\PostgreSQL\9.2" as binary directory, and
"D:\db\postgresql\9.2\data" as the data directory.

The installer runs for > 1 hour (actually it had not finished yet).
While doing so, it starts ICACLS child processes that modify ACLs of
every directory (and file?) on the D:\ volume:

icacls  D:\ /grant "UserName":(NP)(RX)
...
icacls  D:\ /grant "NT AUTHORITY\NetworkService":(NP)(RX)
...


Since EnterpriseDB does not seem to have a public bug tracker, I post
the issue here in hope it get's attention.

Regards,
Alex



Re: Bug: Windows installer modifies ACLs on the whole volume

From
Craig Ringer
Date:
On 01/09/2013 05:10 PM, emergency.shower@gmail.com wrote:
> One click installer postgresql-9.2.2-1-windows-x64.exe from
> http://www.postgresql.org/download/windows/.
>
> Start the installer from "D:\downloads", choose "C:\Program
> Files\PostgreSQL\9.2" as binary directory, and
> "D:\db\postgresql\9.2\data" as the data directory.
>
> The installer runs for > 1 hour (actually it had not finished yet).
> While doing so, it starts ICACLS child processes that modify ACLs of
> every directory (and file?) on the D:\ volume:
>
> icacls  D:\ /grant "UserName":(NP)(RX)
> ...
> icacls  D:\ /grant "NT AUTHORITY\NetworkService":(NP)(RX)
> ...
I see periodic reports of this issue, but I don't think it's ever been
conclusively solved. I seem to recall discussion suggesting the cause
had been found a while ago, but you're on the latest release so this
isn't just an old in-installer-version issue.

It'd be helpful to have a full list of installed software, service
packs, etc, along with the exact Windows version.

I've CC'd Sandeep at EnterpriseDB, who IIRC is looking after the
installer at the moment.

-- Craig Ringer                   http://www.2ndQuadrant.com/PostgreSQL Development, 24x7 Support, Training & Services




Re: Bug: Windows installer modifies ACLs on the whole volume

From
Sandeep Thakkar
Date:
I remember last time we fixed a bug in initcluster.vbs. There was a typo which caused icacls to run on system drive. Let me nail down this issue completely. I'm on it.

On Fri, Jan 11, 2013 at 9:28 AM, Craig Ringer <craig@2ndquadrant.com> wrote:
On 01/09/2013 05:10 PM, emergency.shower@gmail.com wrote:
> One click installer postgresql-9.2.2-1-windows-x64.exe from
> http://www.postgresql.org/download/windows/.
>
> Start the installer from "D:\downloads", choose "C:\Program
> Files\PostgreSQL\9.2" as binary directory, and
> "D:\db\postgresql\9.2\data" as the data directory.
>
> The installer runs for > 1 hour (actually it had not finished yet).
> While doing so, it starts ICACLS child processes that modify ACLs of
> every directory (and file?) on the D:\ volume:
>
> icacls  D:\ /grant "UserName":(NP)(RX)
> ...
> icacls  D:\ /grant "NT AUTHORITY\NetworkService":(NP)(RX)
> ...
I see periodic reports of this issue, but I don't think it's ever been
conclusively solved. I seem to recall discussion suggesting the cause
had been found a while ago, but you're on the latest release so this
isn't just an old in-installer-version issue.

It'd be helpful to have a full list of installed software, service
packs, etc, along with the exact Windows version.

I've CC'd Sandeep at EnterpriseDB, who IIRC is looking after the
installer at the moment.

--
 Craig Ringer                   http://www.2ndQuadrant.com/
 PostgreSQL Development, 24x7 Support, Training & Services




--
Sandeep Thakkar
Senior Software Engineer
EnterpriseDB Corporation
The Enterprise Postgres Company
Phone: +91.20.30589523

Website: www.enterprisedb.com
EnterpriseDB Blog: http://blogs.enterprisedb.com/
Follow us on Twitter: http://www.twitter.com/enterprisedb

This e-mail message (and any attachment) is intended for the use of the individual or entity to whom it is addressed. This message contains information from EnterpriseDB Corporation that may be privileged, confidential, or exempt from disclosure under applicable law. If you are not the intended recipient or authorized to receive this for the intended recipient, any use, dissemination, distribution, retention, archiving, or copying of this communication is strictly prohibited. If you have received this e-mail in error, please notify the sender immediately by reply e-mail and delete this message.

Re: Bug: Windows installer modifies ACLs on the whole volume

From
Sandeep Thakkar
Date:
Alex, please send across the install-postgresql.log. It must be present in your system TEMP.

On Fri, Jan 11, 2013 at 12:02 PM, Sandeep Thakkar <sandeep.thakkar@enterprisedb.com> wrote:
I remember last time we fixed a bug in initcluster.vbs. There was a typo which caused icacls to run on system drive. Let me nail down this issue completely. I'm on it.

On Fri, Jan 11, 2013 at 9:28 AM, Craig Ringer <craig@2ndquadrant.com> wrote:
On 01/09/2013 05:10 PM, emergency.shower@gmail.com wrote:
> One click installer postgresql-9.2.2-1-windows-x64.exe from
> http://www.postgresql.org/download/windows/.
>
> Start the installer from "D:\downloads", choose "C:\Program
> Files\PostgreSQL\9.2" as binary directory, and
> "D:\db\postgresql\9.2\data" as the data directory.
>
> The installer runs for > 1 hour (actually it had not finished yet).
> While doing so, it starts ICACLS child processes that modify ACLs of
> every directory (and file?) on the D:\ volume:
>
> icacls  D:\ /grant "UserName":(NP)(RX)
> ...
> icacls  D:\ /grant "NT AUTHORITY\NetworkService":(NP)(RX)
> ...
I see periodic reports of this issue, but I don't think it's ever been
conclusively solved. I seem to recall discussion suggesting the cause
had been found a while ago, but you're on the latest release so this
isn't just an old in-installer-version issue.

It'd be helpful to have a full list of installed software, service
packs, etc, along with the exact Windows version.

I've CC'd Sandeep at EnterpriseDB, who IIRC is looking after the
installer at the moment.

--
 Craig Ringer                   http://www.2ndQuadrant.com/
 PostgreSQL Development, 24x7 Support, Training & Services




--
Sandeep Thakkar
Senior Software Engineer
EnterpriseDB Corporation
The Enterprise Postgres Company
Phone: +91.20.30589523

Website: www.enterprisedb.com
EnterpriseDB Blog: http://blogs.enterprisedb.com/
Follow us on Twitter: http://www.twitter.com/enterprisedb

This e-mail message (and any attachment) is intended for the use of the individual or entity to whom it is addressed. This message contains information from EnterpriseDB Corporation that may be privileged, confidential, or exempt from disclosure under applicable law. If you are not the intended recipient or authorized to receive this for the intended recipient, any use, dissemination, distribution, retention, archiving, or copying of this communication is strictly prohibited. If you have received this e-mail in error, please notify the sender immediately by reply e-mail and delete this message.



--
Sandeep Thakkar
Senior Software Engineer
EnterpriseDB Corporation
The Enterprise Postgres Company
Phone: +91.20.30589523

Website: www.enterprisedb.com
EnterpriseDB Blog: http://blogs.enterprisedb.com/
Follow us on Twitter: http://www.twitter.com/enterprisedb

This e-mail message (and any attachment) is intended for the use of the individual or entity to whom it is addressed. This message contains information from EnterpriseDB Corporation that may be privileged, confidential, or exempt from disclosure under applicable law. If you are not the intended recipient or authorized to receive this for the intended recipient, any use, dissemination, distribution, retention, archiving, or copying of this communication is strictly prohibited. If you have received this e-mail in error, please notify the sender immediately by reply e-mail and delete this message.

Re: Bug: Windows installer modifies ACLs on the whole volume

From
Sandeep Thakkar
Date:
Alex, how much of your D:\ is occupied or what is the total size of the files and folders in D:\ ?

Can you just try the following command manually to see if it returns quick?

icacls  D:\ /grant "UserName":RX 

On Fri, Jan 11, 2013 at 9:28 AM, Craig Ringer <craig@2ndquadrant.com> wrote:
On 01/09/2013 05:10 PM, emergency.shower@gmail.com wrote:
> One click installer postgresql-9.2.2-1-windows-x64.exe from
> http://www.postgresql.org/download/windows/.
>
> Start the installer from "D:\downloads", choose "C:\Program
> Files\PostgreSQL\9.2" as binary directory, and
> "D:\db\postgresql\9.2\data" as the data directory.
>
> The installer runs for > 1 hour (actually it had not finished yet).
> While doing so, it starts ICACLS child processes that modify ACLs of
> every directory (and file?) on the D:\ volume:
>
> icacls  D:\ /grant "UserName":(NP)(RX)
> ...
> icacls  D:\ /grant "NT AUTHORITY\NetworkService":(NP)(RX)
> ...
I see periodic reports of this issue, but I don't think it's ever been
conclusively solved. I seem to recall discussion suggesting the cause
had been found a while ago, but you're on the latest release so this
isn't just an old in-installer-version issue.

It'd be helpful to have a full list of installed software, service
packs, etc, along with the exact Windows version.

I've CC'd Sandeep at EnterpriseDB, who IIRC is looking after the
installer at the moment.

--
 Craig Ringer                   http://www.2ndQuadrant.com/
 PostgreSQL Development, 24x7 Support, Training & Services




--
Sandeep Thakkar
Senior Software Engineer
EnterpriseDB Corporation
The Enterprise Postgres Company
Phone: +91.20.30589523

Website: www.enterprisedb.com
EnterpriseDB Blog: http://blogs.enterprisedb.com/
Follow us on Twitter: http://www.twitter.com/enterprisedb

This e-mail message (and any attachment) is intended for the use of the individual or entity to whom it is addressed. This message contains information from EnterpriseDB Corporation that may be privileged, confidential, or exempt from disclosure under applicable law. If you are not the intended recipient or authorized to receive this for the intended recipient, any use, dissemination, distribution, retention, archiving, or copying of this communication is strictly prohibited. If you have received this e-mail in error, please notify the sender immediately by reply e-mail and delete this message.