Re: Bug: Windows installer modifies ACLs on the whole volume

I remember last time we fixed a bug in initcluster.vbs. There was a typo which caused icacls to run on system drive. Let me nail down this issue completely. I'm on it.

On Fri, Jan 11, 2013 at 9:28 AM, Craig Ringer <craig@2ndquadrant.com> wrote:

On 01/09/2013 05:10 PM, emergency.shower@gmail.com wrote:
> One click installer postgresql-9.2.2-1-windows-x64.exe from
> http://www.postgresql.org/download/windows/.
>
> Start the installer from "D:\downloads", choose "C:\Program
> Files\PostgreSQL\9.2" as binary directory, and
> "D:\db\postgresql\9.2\data" as the data directory.
>
> The installer runs for > 1 hour (actually it had not finished yet).
> While doing so, it starts ICACLS child processes that modify ACLs of
> every directory (and file?) on the D:\ volume:
>
> icacls  D:\ /grant "UserName":(NP)(RX)
> ...
> icacls  D:\ /grant "NT AUTHORITY\NetworkService":(NP)(RX)
> ...

I see periodic reports of this issue, but I don't think it's ever been
conclusively solved. I seem to recall discussion suggesting the cause
had been found a while ago, but you're on the latest release so this
isn't just an old in-installer-version issue.

It'd be helpful to have a full list of installed software, service
packs, etc, along with the exact Windows version.

I've CC'd Sandeep at EnterpriseDB, who IIRC is looking after the
installer at the moment.

--
 Craig Ringer                   http://www.2ndQuadrant.com/
 PostgreSQL Development, 24x7 Support, Training & Services

--
Sandeep Thakkar
Senior Software Engineer
EnterpriseDB Corporation
The Enterprise Postgres Company
Phone: +91.20.30589523

Website: www.enterprisedb.com
EnterpriseDB Blog: http://blogs.enterprisedb.com/
Follow us on Twitter: http://www.twitter.com/enterprisedb

This e-mail message (and any attachment) is intended for the use of the individual or entity to whom it is addressed. This message contains information from EnterpriseDB Corporation that may be privileged, confidential, or exempt from disclosure under applicable law. If you are not the intended recipient or authorized to receive this for the intended recipient, any use, dissemination, distribution, retention, archiving, or copying of this communication is strictly prohibited. If you have received this e-mail in error, please notify the sender immediately by reply e-mail and delete this message.