From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from list by lists.gnu.org with archive (Exim 4.71) id 1VxJed-00077s-8v for mharc-grub-devel@gnu.org; Sun, 29 Dec 2013 11:55:55 -0500 Received: from eggs.gnu.org ([2001:4830:134:3::10]:56526) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1VxJeT-000774-RE for grub-devel@gnu.org; Sun, 29 Dec 2013 11:55:54 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1VxJeJ-0005Qg-Ty for grub-devel@gnu.org; Sun, 29 Dec 2013 11:55:45 -0500 Received: from mail-lb0-x22e.google.com ([2a00:1450:4010:c04::22e]:34607) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1VxJeJ-0005Qc-Hn for grub-devel@gnu.org; Sun, 29 Dec 2013 11:55:35 -0500 Received: by mail-lb0-f174.google.com with SMTP id y6so5149558lbh.33 for ; Sun, 29 Dec 2013 08:55:34 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:subject:from:to:date:in-reply-to:references:content-type :mime-version; bh=nuHlKuadFg0QG+WxrGr7s18NEzFh6Qlu2rkMsfVRr6I=; b=elAjTxyv9q3QCedrUper3mBo1/LIbMWrHVzx2+BTgDQIodSZewojoFMo7rImL6o9MG CQc7tcaatuzAgmtZMeFNjwbFetQsd4gGS6LjO5HSe1xpBQv0XmqsNu5+k6l6w19lRcHF 7Hcg5+a6AurSzvdA0jia1DJQ0RazrfJoR0PM+7Fp1wfgbJeHezWkcIv6Gq3dlBAmHE5v 8ZUG/EwOP9v/z5kzMgNCaXspr1bpfhD7PTKOWCyNl7v4GnHaNp+Pnk21kmHRoGWRdRZT svDbPRpSMqT4wNgnEv0a5wZFDGI5T59Jn1f79ZYpCK/1wGyV9khczZ9bR96xNt4k3xJ/ GP7A== X-Received: by 10.112.17.39 with SMTP id l7mr9644853lbd.51.1388336134339; Sun, 29 Dec 2013 08:55:34 -0800 (PST) Received: from [192.168.1.44] (ppp91-76-134-134.pppoe.mtu-net.ru. [91.76.134.134]) by mx.google.com with ESMTPSA id np10sm25923157lbb.7.2013.12.29.08.55.33 for (version=SSLv3 cipher=RC4-SHA bits=128/128); Sun, 29 Dec 2013 08:55:33 -0800 (PST) Message-ID: <1388336131.918.119.camel@opensuse.site> Subject: Re: grub tools and Windows UAC From: Andrey Borzenkov To: grub-devel@gnu.org Date: Sun, 29 Dec 2013 20:55:31 +0400 In-Reply-To: <52BACCB2.3020507@gmail.com> References: <52BACCB2.3020507@gmail.com> Content-Type: multipart/signed; micalg="pgp-sha1"; protocol="application/pgp-signature"; boundary="=-nuq4Fcwf3nyp6O5Cf8u1" X-Mailer: Evolution 3.10.2 Mime-Version: 1.0 X-detected-operating-system: by eggs.gnu.org: Error: Malformed IPv6 address (bad octet value). X-Received-From: 2a00:1450:4010:c04::22e X-BeenThere: grub-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list Reply-To: The development of GNU GRUB List-Id: The development of GNU GRUB List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 29 Dec 2013 16:55:54 -0000 --=-nuq4Fcwf3nyp6O5Cf8u1 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable =D0=92 =D0=A1=D1=80, 25/12/2013 =D0=B2 13:16 +0100, Vladimir '=CF=86-coder/= phcoder' Serbinenko =D0=BF=D0=B8=D1=88=D0=B5=D1=82: > On 25.12.2013 12:11, Andrey Borzenkov wrote: > > If UAC is enabled, running grub-install (and probably others too - did > > not try) will request privilege elevation; but then process is > > re-launched in separate window and disappears after it is finished. > > This makes even reading help impossible. > I think that the cause of it is get_default_platform which uses > get_efi_variable to check for EFI. Perhaps we should check privileges > and assume BIOS if get_default_platform is run just for the help. > >=20 It turned out to be completely unrelated. In its infinite wisdom Windows assumes that if program has "install" or "setup" in its name, it requires privileges elevation. Just try to run grub-bios-setup.exe :) I did not find how to prevent it. The only suggestion is to create manifest, but it has somewhat interesting effect - adding manifest with level=3D"asInvoker" does not stop Windows from attempting elevation but now blocks attempt. So program immediately terminates with Access Denied. And it results in nagging window about unsigned application (may be signed applications would behave differently). It is possible to set environment variable __compat_layer to RunAsInvoker, but it must be done *before* starting process and is outside of grub control. Unless someone with better Windows experience can offer solution I'm afraid we have to live with it. Or rename these programs on Windows. --=-nuq4Fcwf3nyp6O5Cf8u1 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iEYEABECAAYFAlLAVAQACgkQR6LMutpd94zeNwCfcCLBzasoyFFvUW7sV8f5UFfc /L8An0CGXbLQ8AfbR864MWVT+fI2Kota =PmyG -----END PGP SIGNATURE----- --=-nuq4Fcwf3nyp6O5Cf8u1--