X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:date:from:mime-version:to:subject
	:content-type:content-transfer-encoding; q=dns; s=default; b=gXo
	iDOgSBZCX6fK5csaLerD1CqrOGwW56g0HkgWCyID6/0LL67yHS16T05TFwiKYwIs
	E0EailCotp3XQFcOd3A2UtkeCimaZ3m5o7HgvrR69HhlcVJniwHKnRJ838Ls5UWU
	23HqVkF+v/AS0muUvtM5Y8YBBrqLbBNnYmQs/1xc=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:date:from:mime-version:to:subject
	:content-type:content-transfer-encoding; s=default; bh=kcglcoo6p
	DJ+Y5WQSghPqvzzjPQ=; b=IRftD1WXtbG+z9BwArw1OUGDQEBu+iqVmpn6JgXI1
	bY3hcvy6PvYqQtDfC1TbmbBzFaGZbLLc7UtVKSmi/6lgvY/MzlphQbu+05fv92Yn
	2zOt2EMASeqN5y/GX22MySeW/nup8YJeb+jx1f5pAwgpD4oTxiFsGhc+Qq0vPPaL
	10=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=-2.4 required=5.0 tests=AWL,BAYES_00,RCVD_IN_DNSWL_LOW,SPF_PASS autolearn=ham version=3.3.2
X-HELO:	mail-ie0-f173.google.com
X-Google-DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:message-id:date:from:user-agent:mime-version:to :subject:content-type:content-transfer-encoding; bh=2pLBYhkevnBrvjaFLnyU797S+eHo++MibgrUU7klOQs=; b=BR6wi25FGyr64w6i1T4VeAZRLGjJFB+guRKl3FiUHInee4zO0ZEpAFtD7a60N4UlNR oa2uoHV5rNGeqaJKqIc+DQmPUUK8EBRgkxnkNsMQ7Nd443cloup3neHkbH5h9g/FfmL/ IkNcdMo+dyjc78J5jGt7n45aj0V1rPxIRN5TMZMXoXlBVnTvIbkwQgPDJBHkHHcp5G+0 AUAvJQGYr3m9rpwEIniZUCZclaAW4Ro+FwIUM2uYzUIFxQTwEOT9H9wF6rMSN8YmqgGW QSbTYzaP3FiMVBZROzjn7yjk0Ay8Kv4ANxnqpPB1OvMxzF5G0nYrgr/Rgd4ZGNrXBLeG iVWg==
X-Gm-Message-State:	ALoCoQn8yDdpar8bHk1pjHZPpzthxuiLfqZty0olnwaLDrektVtn/Nx7UMZy0yOOzE9dmbSNuInj
X-Received:	by 10.42.35.198 with SMTP id r6mr33036611icd.45.1399297767158; Mon, 05 May 2014 06:49:27 -0700 (PDT)
Message-ID:	<536796E4.2090009@breisch.org>
Date:	Mon, 05 May 2014 09:49:24 -0400
From:	"Chris J. Breisch" <chris DOT ml AT breisch DOT org>
User-Agent:	Postbox 3.0.9 (Windows/20140128)
MIME-Version:	1.0
To:	"cygwin AT cygwin DOT com" <cygwin AT cygwin DOT com>
Subject:	Problem with "None" Group on Non-Domain Members
X-IsSubscribed:	yes

Hi,

I noticed this over the weekend. It's probably working as designed, 
however. And may have even been noticed by others before.

As has been noted in the past, if your machine is not a Domain member, 
your account gets assigned to the "None" group. And it's your default 
group as well. The problem is that the "None" group isn't very well 
behaved when it comes to permissions.

Example below.

$ mkdir none-group-test
$ cd none-group-test/
$ touch foo
$ ls -l foo
-rw-rw-r-- 1 Chris None 0 May  5 09:35 foo
$ chmod 600 foo
$ ls -l foo
-rw-rw---- 1 Chris None 0 May  5 09:35 foo
$ chgrp Users foo
$ chmod 600 foo
$ ls -l foo
-rw------- 1 Chris Users 0 May  5 09:35 foo

When the group for a file or directory is set to "None", the group 
permissions always mimic the owner permissions. I assume this is nothing 
Cygwin has control over. But, this causes problems for programs like SSH 
which expect some of its files to be locked down and only owner 
accessible. Since "None" is the default group, this can be rather irksome.

As a workaround, I changed my default group in /etc/passwd from "None" 
(513) to "Users" (545). That worked fine.

However, I wonder two things:
1) Do we have to make "None" be the default group in a non-Domain 
environment? Is this something that could be set by mkpasswd? I realize 
this is a Windows Group and Cygwin is just doing what Windows tells it 
to do, but maybe that's not the best idea in this case.
2) How is this all going to work with Corinna's new stuff? Will I even 
be able to change my default group with it?

Just to be clear, this is only a problem on non-Domain accounts. For a 
Domain account the default group is "Domain Users" (513) rather than 
"None" (513), and "Domain Users" is well-behaved.

-- 
Chris J. Breisch

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -