X-Recipient:	archive-cygwin AT delorie DOT com
X-SWARE-Spam-Status:	No, hits=-1.2 required=5.0 tests=AWL,BAYES_00
X-Spam-Check-By:	sourceware.org
X-ASG-Debug-ID:	1256255132-417101e50000-w5GHUG
X-Barracuda-URL:	http://postoffice2.aconex.com:8000/cgi-bin/mark.cgi
X-Barracuda-Envelope-From:	mward AT aconex DOT com
X-ASG-Orig-Subj:	default ACLs
Subject:	default ACLs
From:	Mikel Ward <mward AT aconex DOT com>
To:	cygwin AT cygwin DOT com
Date:	Fri, 23 Oct 2009 10:45:27 +1100
Message-Id:	<1256255127.2713.41.camel@mward-laptop.ops.acx>
Mime-Version:	1.0
X-Barracuda-Connect:	postoffice.yarra.acx[192.168.102.1]
X-Barracuda-Start-Time:	1256255132
X-Barracuda-Virus-Scanned:	by Aconex Staff Email Spam Firewall at aconex.com
X-IsSubscribed:	yes
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com

Hi All

Default ACLs don't seem to work as they would on Linux, or for that
matter as they do for files created via Windows Explorer.

Is this expected?

Administrator AT hostname:/
$ mkdir newdir

Administrator AT hostname:/
$ getfacl newdir
# file: newdir
# owner: Administrator
# group: None
user::rwx
group::r-x
mask:rwx
other:r-x
default:user::rwx
default:group::r-x
default:other:r-x

Administrator AT hostname:/
$ setfacl -m 'd:g:dbas:rwx,d:g:SYSTEM:rwx' newdir

Administrator AT hostname:/
$ getfacl newdir
# file: newdir
# owner: Administrator
# group: None
user::rwx
group::r-x
mask:rwx
other:r-x
default:user::rwx
default:group::r-x
default:group:SYSTEM:rwx
default:group:dbas:rwx
default:mask:rwx
default:other:r-x

Administrator AT hostname:/
$ touch newdir/newfile

Administrator AT hostname:/
$ getfacl newdir/newfile
# file: newdir/newfile
# owner: Administrator
# group: None
user::rw-
group::r--
mask:rwx
other:r--

Irrespective of CYGWIN=(null), CYGWIN=ntsec, or CYGWIN=nontsec.

If I create a file in Windows Explorer, its ACLs are:
$ getfacl newdir/newfile2
# file: newdir/newfile2
# owner: Administrators
# group: None
user::rwx
group::r-x
group:SYSTEM:rwx
group:Users:r-x
group:dbas:rwx
mask:rwx
other:r-x

Basically I'm looking for a way to ensure the right users and groups can read files that I create.

Thanks

Mikel



--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -