X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:date:from:mime-version:to:subject
	:references:in-reply-to:content-type:content-transfer-encoding;
	q=dns; s=default; b=NqY4owyN+R4jmWJV0acLidvhnOOCMBYw1/Z6GNuycIa
	8Rdi1rdP1V1Nzu/6vGK+ZguNoYGHyeoUwwt2XZ/RTLyHjzS5qThtzujHCHHUa15/
	hS9oy4JZMbO8SWy+9AYqS9coGz0fJHPJFjwrOZmmxLswhLujG5XAZq1sz9aFZy8w
	=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:date:from:mime-version:to:subject
	:references:in-reply-to:content-type:content-transfer-encoding;
	s=default; bh=+dnQJNZPGfw8mIGOhM3OXkRTsfc=; b=Hcmt1UiiqV9dZscdn
	xICUhm1GRVLpsVeEL88919U3BpHdmbDlRYAPcGP433yQjbGGT2604oxgff6YaapX
	R8a4TaVnwE6zUU/g32ikscR7BtSUu4D1WBvfN5cgh2zpjIMK5XzWs5Y7omkmYkpQ
	2wxMJF491XAU1tMTLqqneVwido=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=-2.4 required=5.0 tests=AWL,BAYES_00,RCVD_IN_DNSWL_LOW,SPF_PASS autolearn=ham version=3.3.2
X-HELO:	mail-ig0-f170.google.com
X-Google-DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:message-id:date:from:user-agent:mime-version:to :subject:references:in-reply-to:content-type :content-transfer-encoding; bh=kURVxmWtcw0Iu66s3AXs2XS0HAlMlQS1QpDNaZZzEVE=; b=DEazMuF7MPdwigYiZ86vMElDqam080Qv6yLA3B6lir9TGiElJ3kyDHbulpxbZibnFc UeV0ZADwBiQA27w+0WYZa+qsxbgYDkA88Cl+lqvDl5xOA29ly+eMgbgOzJF55DMIyzQC YrTGo9fmN7/wakbiXM5JldHUfuH7VYz+MIwuqm2xlkGouxYZkLig883kS/b+dwtxbF40 JGYAtqPWtIAWpu4aWpNKGkhaPliVo9Ap20+z5VBouwOwsN9Dw32qoS0CX3narAJtJy2o NZk9Xeo0t6gP1yfxNa8GsaElNgoc3o00pA9R+rU6tdXsz6Nq38F7wRAYx9TndeqR7J9P 93Pw==
X-Gm-Message-State:	ALoCoQnwPOpzPHfbYUjbiyuyqrXDnJvOI9dcu2oFjFdu0/9TVc+E24T99koGCb3dLcaEGZkxY84z
X-Received:	by 10.50.72.50 with SMTP id a18mr26191674igv.35.1399316200195; Mon, 05 May 2014 11:56:40 -0700 (PDT)
Message-ID:	<5367DEE5.5010407@breisch.org>
Date:	Mon, 05 May 2014 14:56:37 -0400
From:	"Chris J. Breisch" <chris DOT ml AT breisch DOT org>
User-Agent:	Postbox 3.0.9 (Windows/20140128)
MIME-Version:	1.0
To:	cygwin AT cygwin DOT com
Subject:	Re: Problem with "None" Group on Non-Domain Members
References:	<536796E4 DOT 2090009 AT breisch DOT org> <20140505135928 DOT GK30918 AT calimero DOT vinschen DOT de> <53679D5C DOT 5030209 AT breisch DOT org> <20140505144745 DOT GA6993 AT calimero DOT vinschen DOT de> <5367ACED DOT 40409 AT breisch DOT org> <20140505154230 DOT GB7694 AT calimero DOT vinschen DOT de> <5367B990 DOT 8050907 AT breisch DOT org> <20140505165723 DOT GM30918 AT calimero DOT vinschen DOT de>
In-Reply-To:	<20140505165723.GM30918@calimero.vinschen.de>
X-IsSubscribed:	yes

Corinna Vinschen wrote:
> On May  5 12:17, Chris J. Breisch wrote:
>> Corinna Vinschen wrote:
>>> An strace of `chmod 400 bar' might sched some light on this issue, but I
>>> have a gut feeling the underlying WIndows call will not even return an
>>> error code...
>> Attached. Your gut seems to be working today...
>
> There *is* something weird here.  Look at this:
>
>>    151   36702 [main] chmod 5536 alloc_sd: uid 1001, gid 513, attribute 0x2190
>>     65   36767 [main] chmod 5536 cygsid::debug_print: alloc_sd: owner SID = S-1-5-21-3514886939-1786686319-3519756147-1001 (+)
>>     70   36837 [main] chmod 5536 cygsid::debug_print: alloc_sd: group SID = S-1-5-21-3514886939-1786686319-3519756147-1001 (+)
>
> alloc_sd (the underlying function creating a security descriptor) gets
> a uid 1001 and gid 513 as input, as usual.  But the owner *and* group
> SIDs of the file's existing security descriptor is
> S-1-5-21-3514886939-1786686319-3519756147-1001, the SID of your user
> account.
>
> Why is your user account the primary group of the file, even though
> your user token definitely has "None" (513) as its primary group?
> How did it get there?
>
I don't have a clue. You're the expert. :)

The ACLs are a little different between the Microsoft Account and the 
regular local account. But, if anything, it's the regular one that looks 
odd to me.

Microsoft Account:
$ icacls bar
bar WIN8-VM\Chris:(R,D,WDAC,WO,WA)
     Everyone:(Rc,S,RA)
     NT AUTHORITY\Authenticated Users:(M)


Local account:
$ icacls foo
foo WIN8-VM\cjb:(R,D,WDAC,WO,WA)
     WIN8-VM\None:(Rc,S,RA)
     Everyone:(Rc,S,RA)

Why does the local account have None permissions, and not Authenticated 
Users?

> Is that something enforced by the "Microsoft accounts", perhaps?
>
> I just had a look into the Local Security Policy settings, and I can't
> see any related setting.
>
I have no clue. If you want to throw some more debugging code into a 
snapshot, I'll happily test it. I'll do whatever you want, even shut up 
and go away. :)

I should point out that all of this is with Cygwin64. From what we've 
discovered so far, it seems likely that I'll get the same behavior under 
Cygwin32. But I'll verify that tonight when I get home.


-- 
Chris J. Breisch

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -