X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=a2tp6JtRiroTkwkAyXS6Vwizs7X3jcgLfLhebNpy9lukjw63t8QIP
	Awk64NiGLRW7TLuXLInM91N4CUcQrDxAimHMiTulStiR5C+SohqUJO6HdooZhTzZ
	bDFcai/R8Kot5n7kxgASprKaPQnr5pqO6QzYqVckR3mWC/gNFulEks=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	bh=oAZFrbA3V+aQ7g+oFp+lQKuPzHI=; b=vEIKcj+2WM6WEfW2x/cdtPMpYY+b
	ainPQWQZbxYlMe9PRDJO6BG4Ouahwd8ET/Fw2c4tIMhLbV++XXzjaywPY6hUHl8E
	8rr9/fIB4+aiMVwykLkyfpaS9uOXrmke0HYoPVQJBkU07pkcEXqOIjQE9YBtIuYF
	MUJu7mRP+EHytRM=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=-5.9 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=3.3.2
X-HELO:	calimero.vinschen.de
Date:	Fri, 27 Feb 2015 10:04:16 +0100
From:	Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To:	cygwin AT cygwin DOT com
Subject:	Re: Too Many Permissions Stripped In 1.7.35?
Message-ID:	<20150227090416.GH11124@calimero.vinschen.de>
Reply-To:	cygwin AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
References:	<CADi7v6JajieaQGq3N5LY2Ck2m7SiOTci6au5t7RL4gxZdvBgEw AT mail DOT gmail DOT com> <87twy8cv4k DOT fsf AT Rainer DOT invalid> <20150226202836 DOT GB10024 AT calimero DOT vinschen DOT de> <CADi7v6LLEhH9Dn3X3+W4Fk2=r7brDKuSHoJT3f7P31FX8523fg AT mail DOT gmail DOT com> <20150226205736 DOT GA10870 AT calimero DOT vinschen DOT de> <CADi7v6+u=92JZUjJ85xwuELFDm7-O4i5+Js_aWVV=6F-wHxatQ AT mail DOT gmail DOT com> <20150226222931 DOT GA11124 AT calimero DOT vinschen DOT de> <87wq33x5nh DOT fsf AT Rainer DOT invalid>
MIME-Version:	1.0
In-Reply-To:	<87wq33x5nh.fsf@Rainer.invalid>
User-Agent:	Mutt/1.5.23 (2014-03-12)

--ISKrrfpKsPiF35CV
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Feb 27 06:52, Achim Gratz wrote:
> Corinna Vinschen writes:
> > Having discussed this, I can understand that it may be desirable to
> > skip the permissions of the SYSTEM account in these circumstances:
> >
> > - Computing the POSIX ACL mask and default mask value and thus in
> >   the permission mask as printed by `ls -l'.
> >
> > - Changing SYSTEM permissions when calling chmod, unless SYSTEM is the
> >   file's owning group.
> >
> > Changing this in the code is pretty straightforward. but I'm not willing
> > to add another mount option for this behaviour.  Either Cygwin ignores
> > SYSTEM in the aforementioned circumstances or it doesn't.
> >
> > Crucial vote starting... now.
>=20
> Given these constraints, I don't think we should treat SYSTEM special
> (if we'd start doing that there'd be other cases that could or should be
> treated special, maybe depending on further conditions).

This is what concerns me most.  If we start special-casing SYSTEM,
what next?  Administrators?  Domain Admins?  Where does it stop
and where does it stop making sense to special-case?

> Mounting with
> posix/acl then makes Cygwin try to conform to POSIX semantics as much as
> possible and potentially strip off ACL permissions when using chmod.
> You will need to keep mounting with noacl to avoid that.

Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--ISKrrfpKsPiF35CV
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQIcBAEBAgAGBQJU8DMQAAoJEPU2Bp2uRE+g1TsP/iioxy+BPT/pegFdswOHNfoo
ds2S6XS1jdyIfjQsGoVmfprSVF1ZYw9Fi7s/8GcsvJWZUCc2WX4vyOkt8ng85KpQ
RGuCgwHrcsqxLJ6vewEfd/Na0BUW/A4Z0AGTJa3NRR3UlsCO6GpXuQqAGuDCS7K6
HbJ4t5bROOuW7Hg5OArR00QvXryQaUcwudgBIXUMI/u+SHyHhQgLlqTQv1qkGdoF
llRYMeCgnNzD7RC+j9OxbUaDL2031rxCFR2yNyXRNP6CS7E1Ppqd/UxGrr/kASO1
tJa1u6FZH0W3EZh9v58xvEEFhLi8PfgzAAvI9xzuY8pe9Q5FTe7rYDBnEs/PUGnb
riS71xPgntgTKqrqVUk0qbfwMJytEKzEj35afmT6KvaAzbCs+uLg2pQb2qqLyNL1
V9Xc3xigVhjPkxVekR1aIEcZXj3/2wCpTKqUpJZdpCSSNCHgpw2fLoLIaNGnPAF4
F9tBXngC622iu0WeowFbilwXJxZ4sLuyGNaUODSj8JIS9nu55B25PIroX3ozoNIU
ND8rsUvZuLeo5Ye7rGqmbEVoqjNVLmny8E2D5vwWgLsSuehya7/PgW9qYciz0kp+
5ig7yIsXqGkuWm8fL8G6vvpf3ZzkOxYfdCx1+ciBfrsi3mQQ9zvFVqnXoULCMaa2
aBb9nHDD3bF0sRR6t4Nn
=UMCm
-----END PGP SIGNATURE-----

--ISKrrfpKsPiF35CV--

- Raw text -