This is an automated email from the ASF dual-hosted git repository.

markt pushed a commit to branch 11.0.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git


The following commit(s) were added to refs/heads/11.0.x by this push:
     new c56456cda8 Use the full path when calling icacls.exe
c56456cda8 is described below

commit c56456cda8151c9504dfb7985700824559d769a7
Author: Mark Thomas <ma...@apache.org>
AuthorDate: Wed Jun 4 11:12:00 2025 +0100

    Use the full path when calling icacls.exe
---
 res/install-win/tomcat.nsi | 6 +++---
 webapps/docs/changelog.xml | 4 ++++
 2 files changed, 7 insertions(+), 3 deletions(-)

diff --git a/res/install-win/tomcat.nsi b/res/install-win/tomcat.nsi
index 6a3605cffb..b694914d85 100644
--- a/res/install-win/tomcat.nsi
+++ b/res/install-win/tomcat.nsi
@@ -368,7 +368,7 @@ Section -post
   ; S-1-5-11     Authenticated users
   ;
   ; Grant admins, LocalService and Local System full control full control
-  nsExec::ExecToStack 'icacls "$INSTDIR" /inheritance:r /grant 
*S-1-5-19:(OI)(CI)(F) /grant *S-1-5-32-544:(OI)(CI)(F) /grant 
*S-1-5-18:(OI)(CI)(F)'
+  nsExec::ExecToStack '$SYSDIR\icacls "$INSTDIR" /inheritance:r /grant 
*S-1-5-19:(OI)(CI)(F) /grant *S-1-5-32-544:(OI)(CI)(F) /grant 
*S-1-5-18:(OI)(CI)(F)'
   Pop $0
   Pop $1
   StrCmp $0 "0" SetGroupPermissionsOk
@@ -381,7 +381,7 @@ Section -post
   ClearErrors
 
   ; Make the icon readable to all authenticated users so it appears correctly 
in the uninstall UI
-  nsExec::ExecToStack 'icacls "$INSTDIR\tomcat.ico" /inheritance:e /grant 
*S-1-5-11:(R)'
+  nsExec::ExecToStack '$SYSDIR\icacls "$INSTDIR\tomcat.ico" /inheritance:e 
/grant *S-1-5-11:(R)'
   Pop $0
   Pop $1
   StrCmp $0 "0" SetIconPermissionsOk
@@ -394,7 +394,7 @@ Section -post
   ClearErrors
 
   ; Make the uninstaller readable and executable to all authenticated users so 
the user that installed Tomcat can also uninstall it
-  nsExec::ExecToStack 'icacls "$INSTDIR\Uninstall.exe" /inheritance:e /grant 
*S-1-5-11:(RX)'
+  nsExec::ExecToStack '$SYSDIR\icacls "$INSTDIR\Uninstall.exe" /inheritance:e 
/grant *S-1-5-11:(RX)'
   Pop $0
   Pop $1
   StrCmp $0 "0" SetUninstallerPermissionsOk
diff --git a/webapps/docs/changelog.xml b/webapps/docs/changelog.xml
index 223b336676..d763ec10f7 100644
--- a/webapps/docs/changelog.xml
+++ b/webapps/docs/changelog.xml
@@ -195,6 +195,10 @@
       <update>
         Update Checkstyle to 10.25.0. (markt)
       </update>
+      <fix>
+        Use the full path when the installer for Windows sets calls
+        <code>icacls.exe</code> to set file permissions. (markt)
+      </fix>
     </changelog>
   </subsection>
 </section>


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to