X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:reply-to:message-id:to:subject
	:in-reply-to:references:mime-version:content-type
	:content-transfer-encoding; q=dns; s=default; b=ZPsnqOq1Z8KvxRZe
	rglRNuiEeI37S7KQsHVeoQqaFBCmgR5onQF76uU3DaYyiMbWEPw5hT6vMAZc9nPx
	k8GpO7zWPbnYWcJRE7aqaS6Zuz8bd+k+ezh4E9oicME+Q/BvHtbmaZEZtnU+HN8b
	bRhJ32r+updCxaXClLBGwsvJ+bs=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:reply-to:message-id:to:subject
	:in-reply-to:references:mime-version:content-type
	:content-transfer-encoding; s=default; bh=x/Yf1G5s1HCeCdhkNNxDHf
	eLTSA=; b=p1mvMRHbOEpQJTjDMcLd2yZ/7Ms4UguAh5KGvam7KoSARCHWc28mC1
	geFlK/AGUlJKRWWRf3czUwLPJEDW3Bfk8ziH2dAfcsrhYKqrIICtQV1aYMRdbgLJ
	iOr8OJxm2SYbBZSmEfsiYp8D8bhiVVYG3FvZYdO5wWnz4wotA4zPQ=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=2.0 required=5.0 tests=AWL,BAYES_60,FREEMAIL_FROM,KAM_BODY_URIBL_PCCC,KAM_FROM_URIBL_PCCC,KAM_THEBAT,SPF_SOFTFAIL autolearn=no version=3.3.2
X-HELO:	smtp.ht-systems.ru
Date:	Thu, 26 Feb 2015 22:51:18 +0300
From:	Andrey Repin <anrdaemon AT yandex DOT ru>
Reply-To:	cygwin AT cygwin DOT com
Message-ID:	<661484179.20150226225118@yandex.ru>
To:	Bryan Berns <bryan DOT berns AT gmail DOT com>, cygwin AT cygwin DOT com
Subject:	Re: Too Many Permissions Stripped In 1.7.35?
In-Reply-To:	<CADi7v6JajieaQGq3N5LY2Ck2m7SiOTci6au5t7RL4gxZdvBgEw@mail.gmail.com>
References:	<CADi7v6JajieaQGq3N5LY2Ck2m7SiOTci6au5t7RL4gxZdvBgEw AT mail DOT gmail DOT com>
MIME-Version:	1.0
X-IsSubscribed:	yes

Greetings, Bryan Berns!

> I honestly haven't read up exactly how Cygwin interprets NTFS
> ACL/ACEs, but I remember seeing on the mailing list that a change was
> made in 1.7.35 was made to permission handling.  It is preferable in
> my organization that the SYSTEM account always have full control the
> local file system.

Then mount filesystem noacl (except core Cygwin stuff).
POSIX permissions are VERY special kind for Windows, and not always the best
idea to try.

> When using chmod under 1.7.35, it looks like
> permissions for SYSTEM get stripped (as well as some others).  Is this
> the desired behavior?  If so, I'll workaround it somehow but just
> wanted to verify before we release this much anticipated Active
> Directory optimized version.  For context, I'm running as the default
> Domain Administrator on a fresh install of Windows 8.1.

> @@@@@@ Testing With 1.7.34 @@@@@@

> $ uname -a
> CYGWIN_NT-6.3 BERNS-WINDOWS 1.7.34(0.285/5/3) 2015-02-04 12:14 x86_64 Cygwin

> $ mkdir TEST-34

> $ chmod 750 TEST-34

> $ icacls TEST-34
> TEST-34 DOMAIN\Administrator:(F)
>         DOMAIN\Domain Users:(RX)
>         Everyone:(Rc,S,RA)
>         BUILTIN\Administrators:(OI)(CI)(F)
>         NT AUTHORITY\SYSTEM:(OI)(CI)(F)
>         BUILTIN\Users:(OI)(CI)(RX)
>         NT AUTHORITY\Authenticated Users:(M)
>         NT AUTHORITY\Authenticated Users:(OI)(CI)(IO)(M)
>         CREATOR OWNER:(OI)(CI)(IO)(F)
>         CREATOR GROUP:(OI)(CI)(IO)(RX)
>         Everyone:(OI)(CI)(IO)(RX)
> Successfully processed 1 files; Failed processing 0 files

> @@@@@@ Testing With 1.7.35 @@@@@@

> $ uname -a
> CYGWIN_NT-6.3 BERNS-WINDOWS 1.7.35(0.286/5/3) 2015-02-25 13:13 x86_64 Cygwin

> $ mkdir TEST-35

> $ chmod 750 TEST-35

> $ icacls TEST-35
> TEST-35 DOMAIN\Administrator:(F)
>         DOMAIN\Domain Users:(RX)
>         Everyone:(Rc,S,RA)
>         BUILTIN\Administrators:(OI)(CI)(RX)
>         NT AUTHORITY\SYSTEM:(OI)(CI)(RX)
>         BUILTIN\Users:(OI)(CI)(RX)
>         NT AUTHORITY\Authenticated Users:(RX)
>         NT AUTHORITY\Authenticated Users:(OI)(CI)(IO)
>         CREATOR OWNER:(OI)(CI)(IO)(RX)
>         CREATOR GROUP:(OI)(CI)(IO)(RX)
>         Everyone:(OI)(CI)(IO)(RX)
> Successfully processed 1 files; Failed processing 0 files



--
WBR,
Andrey Repin (anrdaemon AT yandex DOT ru) 26.02.2015, <22:50>

Sorry for my terrible english...


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -