From 1ce3c672e49dba730b528aa346bb522c0150567c Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Sat, 4 May 2024 03:47:04 +0200 Subject: Adding upstream version 7.0.18-dfsg. Signed-off-by: Daniel Baumann --- doc/manual/en_US/user_Installation.xml | 44 ++++++++++++++++++++++++++++++++++ 1 file changed, 44 insertions(+) (limited to 'doc/manual/en_US') diff --git a/doc/manual/en_US/user_Installation.xml b/doc/manual/en_US/user_Installation.xml index 2661b259..4cf6e403 100644 --- a/doc/manual/en_US/user_Installation.xml +++ b/doc/manual/en_US/user_Installation.xml @@ -56,6 +56,50 @@ + + + Windows Installation Directory Security Requirements + + + The installation directory on Windows hosts must meet certain security requirements, in + order to be accepted by the Windows installer. + + + + This also applies for upgrades of &product-name;. + + + + For example, when installing &product-name; into a custom location at + X:\Data\MyPrograms\&product-name;, all parent directories of this path + (namely X:\Data and X:\Data\MyPrograms) have to meet the following + Discretionary Access Control List (DACL): + + Users S-1-5-32-545:(OI)(CI)(RX) + Users S-1-5-32-545:(DE,WD,AD,WEA,WA) + Authenticated Users S-1-5-11:(OI)(CI)(RX) + Authenticated Users S-1-5-11:(DE,WD,AD,WEA,WA) + + Directory inheritance must also be disabled for all parent directories. + + + + You can use the icacls Windows command line tool + to meet the security requirements. For example: + + icacls <Directory> /reset /t /c + icacls <Directory> /inheritance:d /t /c + icacls <Directory> /grant *S-1-5-32-545:(OI)(CI)(RX) + icacls <Directory> /deny *S-1-5-32-545:(DE,WD,AD,WEA,WA) + icacls <Directory> /grant *S-1-5-11:(OI)(CI)(RX) + icacls <Directory> /deny *S-1-5-11:(DE,WD,AD,WEA,WA) + + Note that these commands must be repeated for all parent directories + (X:\Data and X:\Data\MyPrograms in this example). + + + + Performing the Installation -- cgit v1.2.3