msys2.github.io icon indicating copy to clipboard operation
msys2.github.io copied to clipboard

Published 20 hours ago • verified publisher icon msys2

Issues installing caused by Windows Security

Open tadghh opened this issue 1 year ago • 6 comments

Issuing installing Msys2 error 254 ~~this is for SEO~~ image

tadghh avatar Dec 27 '23 06:12 tadghh

Have you tried to exclude the installation directory in antivirus or antimalware software?

Biswa96 avatar Dec 27 '23 06:12 Biswa96

This issue was encountered here too https://github.com/appveyor/ci/issues/3777

Workaround

Script

See this link, it looks like it disables the required protections for only Msys2

Manual

Go-to Windows Security -> App and browser control -> Exploit protection

Need to keep the following disabled

  • Force randomization ASLR
  • Randomize memory allocations (Bottom-up ALSR)
  • Validate exception chains (SEHOP)
  • Validate heap intergrity

Notes

requiring systems to disable these settings could harm the adoption of Msys2.

tadghh avatar Dec 27 '23 06:12 tadghh

AFAIK ASLR is not enabled by default on Windows.

MehdiChinoune avatar Dec 27 '23 07:12 MehdiChinoune

AFAIK ASLR is not enabled by default on Windows.

This is correct, however with this "issue" the user base who require those features are being cut off imo.

tadghh avatar Dec 28 '23 05:12 tadghh

This is correct, however with this "issue" the user base who require those features are being cut off imo.

We can do nothing about it, While MinGW-w64 (native Windows) packages were built with ASLR enabled https://www.msys2.org/news/#2021-01-31-aslr-enabled-by-default. but unfortunately CygWin (Which MSYS environment is based on) has some issues with it. There were some reports like yours before, like this https://github.com/msys2/MSYS2-packages/issues/3925 see also: https://cygwin.com/pipermail/cygwin/2020-March/244106.html https://cygwin.com/pipermail/cygwin/2020-August/245973.html

MehdiChinoune avatar Dec 28 '23 05:12 MehdiChinoune

This is correct, however with this "issue" the user base who require those features are being cut off imo.

We can do nothing about it, While MinGW-w64 (native Windows) packages were built with ASLR enabled https://www.msys2.org/news/#2021-01-31-aslr-enabled-by-default. but unfortunately CygWin (Which MSYS environment is based on) has some issues with it. There were some reports like yours before, like this msys2/MSYS2-packages#3925 see also: https://cygwin.com/pipermail/cygwin/2020-March/244106.html https://cygwin.com/pipermail/cygwin/2020-August/245973.html

Hopefully someday it will be fixed :)

tadghh avatar Dec 28 '23 07:12 tadghh