X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:date:message-id:subject:from:to
	:content-type; q=dns; s=default; b=X7eetOB2SWW8wYXXW7ograLncQju5
	/dY4h15VTpAy23jybmFEVdS+zzApjSg2spoRMR/Zurgif+qllo16uPPbeO7XT6gy
	hIFd3en68yhDIOEqWwXhTvDxbKPkRK92hZXjePZgPOA9dPiU8I6flCBmuyfojc0d
	jMvdBtZRUos2S8=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:date:message-id:subject:from:to
	:content-type; s=default; bh=OYyDkFr5q3GNJYufdRb91T4QRxI=; b=rGd
	s5V+ImramN02T/5BvBANe3Mz/2JlV6Zw64cGYtwbjUM3Z8lkEDANCGirtkDxggNa
	Rmts8VUdjoH7S7boTPxbJBiQTmniUxWqvtr/wm3F93/x5sNwiJnRRkJ8dKRh+lYz
	zzVE6pLhnSicesoOSHbIUbpqy9+WUfuQNkZ6hicY=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=2.9 required=5.0 tests=AWL,BAYES_05,FREEMAIL_FROM,KAM_FROM_URIBL_PCCC,RCVD_IN_DNSWL_LOW,SPF_PASS autolearn=no version=3.3.2
X-HELO:	mail-lb0-f181.google.com
MIME-Version:	1.0
X-Received:	by 10.153.4.44 with SMTP id cb12mr9302866lad.26.1424979301063; Thu, 26 Feb 2015 11:35:01 -0800 (PST)
Date:	Thu, 26 Feb 2015 14:35:01 -0500
Message-ID:	<CADi7v6JajieaQGq3N5LY2Ck2m7SiOTci6au5t7RL4gxZdvBgEw@mail.gmail.com>
Subject:	Too Many Permissions Stripped In 1.7.35?
From:	Bryan Berns <bryan DOT berns AT gmail DOT com>
To:	cygwin AT cygwin DOT com
X-IsSubscribed:	yes

I honestly haven't read up exactly how Cygwin interprets NTFS
ACL/ACEs, but I remember seeing on the mailing list that a change was
made in 1.7.35 was made to permission handling.  It is preferable in
my organization that the SYSTEM account always have full control the
local file system.  When using chmod under 1.7.35, it looks like
permissions for SYSTEM get stripped (as well as some others).  Is this
the desired behavior?  If so, I'll workaround it somehow but just
wanted to verify before we release this much anticipated Active
Directory optimized version.  For context, I'm running as the default
Domain Administrator on a fresh install of Windows 8.1.

@@@@@@ Testing With 1.7.34 @@@@@@

$ uname -a
CYGWIN_NT-6.3 BERNS-WINDOWS 1.7.34(0.285/5/3) 2015-02-04 12:14 x86_64 Cygwin

$ mkdir TEST-34

$ chmod 750 TEST-34

$ icacls TEST-34
TEST-34 DOMAIN\Administrator:(F)
        DOMAIN\Domain Users:(RX)
        Everyone:(Rc,S,RA)
        BUILTIN\Administrators:(OI)(CI)(F)
        NT AUTHORITY\SYSTEM:(OI)(CI)(F)
        BUILTIN\Users:(OI)(CI)(RX)
        NT AUTHORITY\Authenticated Users:(M)
        NT AUTHORITY\Authenticated Users:(OI)(CI)(IO)(M)
        CREATOR OWNER:(OI)(CI)(IO)(F)
        CREATOR GROUP:(OI)(CI)(IO)(RX)
        Everyone:(OI)(CI)(IO)(RX)
Successfully processed 1 files; Failed processing 0 files

@@@@@@ Testing With 1.7.35 @@@@@@

$ uname -a
CYGWIN_NT-6.3 BERNS-WINDOWS 1.7.35(0.286/5/3) 2015-02-25 13:13 x86_64 Cygwin

$ mkdir TEST-35

$ chmod 750 TEST-35

$ icacls TEST-35
TEST-35 DOMAIN\Administrator:(F)
        DOMAIN\Domain Users:(RX)
        Everyone:(Rc,S,RA)
        BUILTIN\Administrators:(OI)(CI)(RX)
        NT AUTHORITY\SYSTEM:(OI)(CI)(RX)
        BUILTIN\Users:(OI)(CI)(RX)
        NT AUTHORITY\Authenticated Users:(RX)
        NT AUTHORITY\Authenticated Users:(OI)(CI)(IO)
        CREATOR OWNER:(OI)(CI)(IO)(RX)
        CREATOR GROUP:(OI)(CI)(IO)(RX)
        Everyone:(OI)(CI)(IO)(RX)
Successfully processed 1 files; Failed processing 0 files

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -