X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:date:from:reply-to:mime-version:to
	:subject:references:in-reply-to:content-type
	:content-transfer-encoding; q=dns; s=default; b=Hv1tGgwvC4374fa6
	FTZ0w8g0SWBElS7kQLgKRD/VwqVh0nqnONoSb8c7SDrP9yw4WVi/3IG0iKqmZ0n2
	Lrev306EylLkCT/m99ROazWnfnCM1YvcPrzUZ8yuv8KHke6TcPTCbkfJVnu+928n
	Ba5reDKAMeLBiIR6xjtAixlvxlI=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:date:from:reply-to:mime-version:to
	:subject:references:in-reply-to:content-type
	:content-transfer-encoding; s=default; bh=lziHG8Mz6Xg7IctJU4pFWW
	6TC/c=; b=Zb6ZxYzjTn0e1+r0FDUtva7JY5yadOvZG7IeXv8PISAl6+FmU15c8h
	3KeRS/m2CLneG7KVu1N0xxv7WYk/XzluGjt3TWp2X678ui+XEqekfQYPPgPxNbVX
	EtcBlzB7pwdKxGPfuOKut0yNR0WtEy56iYeEx4J6u2zJ/MYfG3N4s=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=-0.4 required=5.0 tests=AWL,BAYES_20,RCVD_IN_DNSWL_NONE autolearn=ham version=3.3.2
X-HELO:	vms173019pub.verizon.net
Message-id:	<5367EA1F.3060800@cygwin.com>
Date:	Mon, 05 May 2014 15:44:31 -0400
From:	"Larry Hall (Cygwin)" <reply-to-list-only-lh AT cygwin DOT com>
Reply-to:	cygwin AT cygwin DOT com
User-Agent:	Mozilla/5.0 (X11; Linux i686; rv:24.0) Gecko/20100101 Thunderbird/24.4.0
MIME-version:	1.0
To:	cygwin AT cygwin DOT com
Subject:	Re: Problem with "None" Group on Non-Domain Members
References:	<536796E4 DOT 2090009 AT breisch DOT org> <20140505135928 DOT GK30918 AT calimero DOT vinschen DOT de> <53679D5C DOT 5030209 AT breisch DOT org> <20140505144745 DOT GA6993 AT calimero DOT vinschen DOT de> <5367ACED DOT 40409 AT breisch DOT org> <20140505154230 DOT GB7694 AT calimero DOT vinschen DOT de> <5367B990 DOT 8050907 AT breisch DOT org> <20140505165723 DOT GM30918 AT calimero DOT vinschen DOT de> <5367DEE5 DOT 5010407 AT breisch DOT org>
In-reply-to:	<5367DEE5.5010407@breisch.org>

On 05/05/2014 02:56 PM, Chris J. Breisch wrote:
> Corinna Vinschen wrote:
>> On May  5 12:17, Chris J. Breisch wrote:
>>> Corinna Vinschen wrote:
>>>> An strace of `chmod 400 bar' might sched some light on this issue, but I
>>>> have a gut feeling the underlying WIndows call will not even return an
>>>> error code...
>>> Attached. Your gut seems to be working today...
>>
>> There *is* something weird here.  Look at this:
>>
>>>    151   36702 [main] chmod 5536 alloc_sd: uid 1001, gid 513, attribute
>>> 0x2190
>>>     65   36767 [main] chmod 5536 cygsid::debug_print: alloc_sd: owner SID
>>> = S-1-5-21-3514886939-1786686319-3519756147-1001 (+)
>>>     70   36837 [main] chmod 5536 cygsid::debug_print: alloc_sd: group SID
>>> = S-1-5-21-3514886939-1786686319-3519756147-1001 (+)
>>
>> alloc_sd (the underlying function creating a security descriptor) gets
>> a uid 1001 and gid 513 as input, as usual.  But the owner *and* group
>> SIDs of the file's existing security descriptor is
>> S-1-5-21-3514886939-1786686319-3519756147-1001, the SID of your user
>> account.
>>
>> Why is your user account the primary group of the file, even though
>> your user token definitely has "None" (513) as its primary group?
>> How did it get there?
>>
> I don't have a clue. You're the expert. :)
>
> The ACLs are a little different between the Microsoft Account and the
> regular local account. But, if anything, it's the regular one that looks odd
> to me.
>
> Microsoft Account:
> $ icacls bar
> bar WIN8-VM\Chris:(R,D,WDAC,WO,WA)
>      Everyone:(Rc,S,RA)
>      NT AUTHORITY\Authenticated Users:(M)
>
>
> Local account:
> $ icacls foo
> foo WIN8-VM\cjb:(R,D,WDAC,WO,WA)
>      WIN8-VM\None:(Rc,S,RA)
>      Everyone:(Rc,S,RA)
>
> Why does the local account have None permissions, and not Authenticated Users?

POSIX permissions are user, group, other.  For your local account, that's
user = cib, group = None, other = Everyone.  Of course, I'm assuming that
foo was made using Cygwin utilities...

I'm wondering if we're getting the user id as the group for the MS
Account because there is no group id.  Chris, what does 'id' for
each of these accounts look like and is the group id (assuming they
are different that the user id) in there?


-- 
Larry

_____________________________________________________________________

A: Yes.
 > Q: Are you sure?
 >> A: Because it reverses the logical flow of conversation.
 >>> Q: Why is top posting annoying in email?

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -