Mail Archives: cygwin/2010/03/25/08:02:22
On Mar 25 07:17, Steve Bray wrote:
> On 03/24/2010 04:15 AM, Corinna Vinschen wrote:
> >On Mar 23 16:37, Chris Idou wrote:
> >>
> >>
> >>After a heck of lot of screwing around, I got this mount point stuff working. Now when I create files under cygwin they have the same permissions profile as they do when I create them under windows.
> >>
> >>BUT...
> >>
> >>git doesn't work still. It fails with the exact same error of "unable to set permission". How do the cygwin APIs work under noacl? They shouldn't ever return error code should they?
> >
> >They should. There's the one case in which you're trying something like
> >chmod 444. Under noacl conditions this sets the DOS R/O attribute. If
> >that fails, the call fails.
> >
> >
> >Corinna
> >
> In my original post I acknowledged that we can not make NTFS ACLS
> exactly match POSIX behavior. The best that we can do is consider
> the impact of our choices.
>
> The cygwin 1.5 behaviour often failed to report chmod failures but
> many of us have been happily using cygwin for a long time and never
> noticed.
Cygwin 1.5 chmod already failed if ntsec was set and changing the ACL
failed. You probably didn't realize it because "nosmbntsec" was the
default for remote drives.
> With cygwin 1.7 the trade-offs in handling NTFS ACLS were changed.
> chmod failures are now reported but now chmod fails unless the user
> has NTFS ACLS that support changing permissions. All of the Windows
> shared drives, that are secured, do not give users permission to
> change permissions on the files that they create and own. This does
Which is bad by design. Permissions on shares should be set in the
ACLs of the remote drive, not by mis-using a badly designed sharing
permission model.
Anyway, you can use "noacl" on a by-share base. That's even better
than in 1.5.
> In our case we still had permissions on our shared drive to write
> attributes and extended attributes. In any case, after mounting
> with noacl git can change the RO flag and is functional.
>
> I was not able to test a condition that blocked changing the RO flag.
> I removed ACLS for write attibutes, write extended attributes (and
> change permissions) but chmod and git were still able to set the
> files RO. My permissions might be leaking through in some way. I
> have only one account and limited permissions to do much
> investigation.
>
> If Chris is in an organization that removes permission to change
> either ACLS or the RO flag, then how does he use cygwin and git?
He should put that to the admins.
Corinna
--
Corinna Vinschen Please, send mails regarding Cygwin to
Cygwin Project Co-Leader cygwin AT cygwin DOT com
Red Hat
--
Problem reports: http://cygwin.com/problems.html
FAQ: http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
- Raw text -