[issue1284316] Win32: Security problem with default installation directory

[Martin v. Löwis]

Martin v. Löwis <martin at v.loewis.de> added the comment:

> Martin: Would it be sufficient to copy the ACLs from %programfiles%,
> or would it be better to hard-code the permissions from
> %programfiles% from a known standard configuration? Is it known if
> the ACLs on %programfiles% in WinXP differ from later platforms? What
> difficulty have you encountered?

I can only answer the last question: I tried using the ACL features in
MSI (i.e. with the LockPermissions table), and couldn't get that to work.

Personally, I would think that restricting write access to the user
performing the installation should be good enough.

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue1284316>
_______________________________________