Implemented Git Bash support for systems with mandatory ASLR enabled

[ghost]

Implemented Git Bash support for systems with mandatory ASLR enabled by modifying the post installation Batch script to add mandatory ASLR security exceptions for the executables in the "usr/bin" directory.

Fixes:

• Workaround for Mandatory ASLR git#1412
• Error: could not fork child process: Resource temporarily unavailable (-1) mintty/wsltty#6 (comment)

[rimrul]

Do we still need ASLR exceptions with 64 Bit Git for Windows 2.41.0 and newer? The Cygwin 3.4.* based Msys2 runtime should work with full ASLR.

git-for-windows/git#1412 (comment)

Please, and I must reiterate, do not automatically deactivate, disable, or otherwise circumvent security options users or administrators have set up.

This user does have a point, we shouldn't just add security exceptions without asking when run as an administrator.

[ghost]

Do we still need ASLR exceptions with 64 Bit Git for Windows 2.41.0 and newer? The Cygwin 3.4.* based Msys2 runtime should work with full ASLR.

git-for-windows/git#1412 (comment)

Please, and I must reiterate, do not automatically deactivate, disable, or otherwise circumvent security options users or administrators have set up.

This user does have a point, we shouldn't just add security exceptions without asking when run as an administrator.

Yes we still need ASLR exceptions with 64 Bit Git for Windows 2.41.0 and newer or at least I need them on my Windows 10 Pro x64 machine and I didn't consider that but I guess it would be proper to always prompt the user unless they supply the silent flags.

I'll get on editing it as soon as possible.

[dscho]

The Cygwin 3.4.* based Msys2 runtime should work with full ASLR.

See msys2/msys2-runtime@a556be7, though.

[rimrul]

See msys2/msys2-runtime@a556be7, though.

I forgot about that. That would explain it.