X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:reply-to:message-id:to:subject
	:in-reply-to:references:mime-version:content-type
	:content-transfer-encoding; q=dns; s=default; b=C1/ABVtY+Ck8POko
	+90Ca/BgDRRO7bEoGlJeuosDW1jqCx+6mzLDwNk9dNQs3NB8F5hYhBWjw5IyX/PB
	jMVm6p2q3cVZguVnbgei+vjnSKaGKZ7pi+BT2SectWa3Qc4orurEYEGWlRFCgbDz
	7TeTxpLq/rXa+CUZgYru5iTa6iQ=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:reply-to:message-id:to:subject
	:in-reply-to:references:mime-version:content-type
	:content-transfer-encoding; s=default; bh=YqJgZ9UWxSrYddBjr/u8EX
	x40RY=; b=eOKSNMPHoyeAAzy5R1YdtXxnynQR+MfTUH96HAoL/rqKzxGNtL5DJL
	QIhxoTUpaCiz9NUUTbiPVRDb3CJQMlGKOX7o7k6WFuvJ6v98sMVIO9i34MH36Tua
	kd7jzxFQVh2bmhE9GPzd5d2TDG/Hf93m2IXKQq/LdyIM3hjM/ws/A=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=4.9 required=5.0 tests=AWL,BAYES_80,FREEMAIL_FROM,KAM_THEBAT,SPF_SOFTFAIL autolearn=no version=3.3.2
X-HELO:	smtp.ht-systems.ru
Date:	Tue, 11 Aug 2015 20:06:42 +0300
From:	Andrey Repin <anrdaemon AT yandex DOT ru>
Reply-To:	cygwin AT cygwin DOT com
Message-ID:	<58991467.20150811200642@yandex.ru>
To:	Achim Gratz <Stromeko AT NexGo DOT DE>, cygwin AT cygwin DOT com
Subject:	Re: Shares with strange ACL settings
In-Reply-To:	<loom.20150811T101658-176@post.gmane.org>
References:	<loom DOT 20150811T101658-176 AT post DOT gmane DOT org>
MIME-Version:	1.0
X-IsSubscribed:	yes

Greetings, Achim Gratz!

> I've thought some more about those strange shares I need to use that have
> inherited ACL that don't let me change the ACL at all and hence prevent
> Cygwin from fixing up the POSIX permissions.  That generally ends up with
> permissions like these:

> % ll test
> total 10
> d---rwx---+ 1 gratz          Domain Users    0 Aug 10 11:51 ./
> d---rwx---+ 1 Administrators Administrators  0 Aug 10 11:50 ../
> ----rwx---+ 1 gratz          Domain Users   18 Aug 10 11:51 blafasel*
> ----rwx---+ 1 gratz          Domain Users   18 Aug 10 11:51 blumblum*

> Some applications that know how POSIX ACL are supposed to work conclude that
> such directories or files are not readable:

> % cd test
> % perl -E 'say -r "." ? "readable" : "not readable";'

Perl is known to have "special" treatment of file permissions.
This issue has been raised in the list before.

> not readable
> % perl -E 'say -r "blafasel" ? "readable" : "not readable";'
> not readable

> Other applications not using this shortcut and going all the way to
> faccessat correctly determine readability:

> % [ -r . ] && echo readable || echo not readable
> readable
> (1056)/mnt/upload/test > [ -r blafasel ] && echo readable || echo not readable
> readable

> If I access the files from another account (that has the same group
> memberships that give read/write access to the share) or change the owner,
> then the shortcut is never invoked:

> $ perl -E 'say -r "." ? "readable" : "not readable";'
> readable
> $ perl -E 'say -r "blafasel" ? "readable" : "not readable";'
> readable
> $ [ -r . ] && echo readable || echo not readable
> readable
> $ [ -r blafasel ] && echo readable || echo not readable
> readable

> So, it would probably help if I had a mount option to force the ownership to
> some account that I am never logged in as, either via a mount option or
> whenever the POSIX user modes are all cleared.  I don't know if that might
> confuse applications when they check ownership on newly created files,
> though.  Is that something that is implementable easily so it could be
> tested via a snapshot?


-- 
With best regards,
Andrey Repin
Tuesday, August 11, 2015 20:04:58

Sorry for my terrible english...


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -