Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sources.redhat.com/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Date:	Wed, 16 Jul 2003 20:38:37 -0500
From:	msg <michael DOT grigoni AT cybertheque DOT org>
Subject:	ACL or file locking issue?
To:	cygwin AT cygwin DOT com
Message-id:	<3F15FE1D.18067547@cybertheque.org>
Organization:	Cybertheque Museum
MIME-version:	1.0
X-Accept-Language:	en

Greetings:

Is this an ACL or file locking issue?

Trying to copy a registry file in a 'bash' shell
as a privileged user (whoami /priv appears below) yields:

(root's prompt is '#')
# cd /cygdrive/c/winnt/system32/config
# cp SAM /var/tmp
cp:'SAM.exe' and '/var/tmp/SAM' are the same file

I can reproduce this behavior on a plain file, eg:

# cd /var/tmp
# echo "testing" > foo
# chmod 770 foo
# chown Administrator foo
# chgrp SYSTEM foo
# cp foo bar
cp: 'foo.exe' and 'bar' are the same file

File must be mode=(at least)440,uid=Administrator,gid=SYSTEM to see
this.

Changing file modes, user and/or group ownership on SAM however doesn't
allow access.

All replies much appreciated.

Michael Grigoni
Cybertheque Museum

Output of 'whoami /priv':

(O) SeTcbPrivilege     = Act as part of the operating system
(O) SeAssignPrimaryTokenPrivilege   = Replace a process level token
(O) SeCreateTokenPrivilege     = Create a token object
(O) SeCreatePermanentPrivilege     = Create permanent shared objects
(X) SeLoadDriverPrivilege     = Load and unload device drivers
(X) SeChangeNotifyPrivilege     = Bypass traverse checking
(O) SeSecurityPrivilege     = Manage auditing and security log
(O) SeBackupPrivilege     = Back up files and directories
(O) SeRestorePrivilege     = Restore files and directories
(O) SeSystemtimePrivilege     = Change the system time
(O) SeShutdownPrivilege     = Shut down the system
(O) SeRemoteShutdownPrivilege     = Force shutdown from a remote system
(O) SeTakeOwnershipPrivilege     = Take ownership of files or other
objects
(O) SeDebugPrivilege     = Debug programs
(O) SeSystemEnvironmentPrivilege    = Modify firmware environment values
(O) SeSystemProfilePrivilege     = Profile system performance
(O) SeProfileSingleProcessPrivilege = Profile single process
(O) SeIncreaseBasePriorityPrivilege = Increase scheduling priority
(O) SeCreatePagefilePrivilege     = Create a pagefile
(O) SeIncreaseQuotaPrivilege     = Increase quotas
(X) SeUndockPrivilege     = Remove computer from docking station
(O) SeMachineAccountPrivilege     = Add workstations to domain

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

- Raw text -