X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:date:from:mime-version:to:subject
	:references:in-reply-to:content-type:content-transfer-encoding;
	q=dns; s=default; b=WkgihJ3ewpY8estdy5L3CbdqdENdYJKrjVFh+HAINof
	csWE9/0pYICD+2cr2tnx1Dzy5oL9PKlWpbj0am0gb4a0Fs8bXgyAgiTkz4+0VZ9X
	9a5JquRTPaAzYkokq+/Q82QD6/Z+9ivSci+VsUbAOQw8628/QbJxuwDBpFBMUzxU
	=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:date:from:mime-version:to:subject
	:references:in-reply-to:content-type:content-transfer-encoding;
	s=default; bh=XpNeQvZ+A6U331eYdY1MH1dFeSo=; b=WNN9SD1at6HbtsRO9
	OlJwoHGAYiWbnawWR3dPMeElTS0IoPp/lU/1tmxrh5vItNcVF/c/fY+LOWjGQKq/
	BKMFYKb5QJElFETny215rGrG0T85kiOkBQI8hlSXPPJrxIs/u+89h+DcsMbCGqlR
	j8IJLMxDaIrCaINIxZiPzkBZ8M=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=1.8 required=5.0 tests=AWL,BAYES_50,RCVD_IN_DNSWL_LOW,SPF_HELO_PASS,SPF_PASS autolearn=ham version=3.3.2
X-HELO:	mail1.bemta3.messagelabs.com
X-Env-Sender:	Tim DOT Magee AT thales-esecurity DOT com
X-Msg-Ref:	server-8.tower-31.messagelabs.com!1426863128!14114147!1
X-StarScan-Received:
X-StarScan-Version:	6.13.4; banners=-,-,-
X-VirusChecked:	Checked
Message-ID:	<550C3418.9060506@thales-esecurity.com>
Date:	Fri, 20 Mar 2015 14:52:08 +0000
From:	Tim Magee <Tim DOT Magee AT thales-esecurity DOT com>
User-Agent:	Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.4.0
MIME-Version:	1.0
To:	cygwin AT cygwin DOT com
Subject:	Re: after update to cygwin 1.7.35(0.287/5/3) all file permissions in cygwin are 070
References:	<CAA3aKc8jHZ02MMcDeJ36jgZFiLFu4gS=pDtS1f=zovaYfJud6Q AT mail DOT gmail DOT com> <CAFrJEvPLneS13L2EBVewRn=g6BRACfdM+7kbvjwusLHO6dkoyg AT mail DOT gmail DOT com>
In-Reply-To:	<CAFrJEvPLneS13L2EBVewRn=g6BRACfdM+7kbvjwusLHO6dkoyg@mail.gmail.com>
X-IsSubscribed:	yes

Hi,

You may have misread the original question (and its subject): the POSIX 
permissions are 070, not (0)700.  These files are accessible to one or 
more of the groups the owner is a member of, but not to the owner.

+1 for the ICACLS workaround though.  I was bit by this recently when 
setting up openssh, which cares about locking down access to keys.  I 
needed to get rid of those group access bits, but chmod left them 
unchanged.   I used ICACLS to remove ACEs for 'NT AUTHORITY\SYSTEM', 
which (based on experimenting) were affecting the 'group' triplet of the 
POSIX permissions.

Cheers,
Tim


On 20/03/15 13:15, Rexdf wrote:
>> i have been using cygwin for many years and currently most of my
>> systems are at 1.7.32(0.274/5/3).
>> i had to get an update to cygwin/X which forced me to also update
>> cygwin. with the update, nearly all windows files have the permission
>> setting of 070 (---rwx---) even when the file is owned by me, and as a
>> consequence most applications fail to load or cannot load dll's or
>> other really annoying issues.
>>
>> is there some "magical" new setting to make cygwin recognize that
>> files owned by me are at least r/w?
>>
>
> I don't know what is your situation, but i can give some suggestion.
>
> AFAIK, 1.7.34+ seems to use the real Windows ACL ( at least partly).
> It means that the 700 file really cannot access by other Windows
> accounts.
>
> First of all, try the follwoing code from mintty. Then restart X.
> mkpasswd -l > /etc/passwd
> mkgroup -l > /etc/group
>
> If it is still 0700 and you right click Properties/Security from
> windows explorer.exe to make sure your real Windows ACL permission is
> true wrong. Then the following command may be helpful.
>
> Start cmd.exe  as Administrators.
> cd to folder contain cygwin folder.
> Run following:
>
> takeown /F cygwin /R
> icacls cygwin /T /grant your_account_name:F
>
> your_account_name can be get from your default cmd.exe(Run as normal
> user) or maybe your cygwin mintty.exe  your_account_name AT your_PC_NAME
> or your C:\Users\ your_account_name.
>
> --
> Problem reports:       http://cygwin.com/problems.html
> FAQ:                   http://cygwin.com/faq/
> Documentation:         http://cygwin.com/docs.html
> Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
>

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -