delorie.com/archives/browse.cgi   search  
Mail Archives: cygwin/2015/11/28/10:54:45

X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
:list-unsubscribe:list-subscribe:list-archive:list-post
:list-help:sender:date:from:to:subject:message-id:reply-to
:references:mime-version:content-type:in-reply-to; q=dns; s=
default; b=JdskpQXPwWbPgTRRsOpTORWxQinfiT8N+/0/ko5R3a/wcBvPfZ6mF
EKWR2lPsLZ5xE4RzlXfvtt2ZmFj9gOxqRbcZozaYSo5rRkb9ZclZ1X78fqCBrjvi
GYM9eIWW5efyHyT4WSgdiToINaAqHzuGPMFeKv5v19jHn+WVJSW+Vc=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
:list-unsubscribe:list-subscribe:list-archive:list-post
:list-help:sender:date:from:to:subject:message-id:reply-to
:references:mime-version:content-type:in-reply-to; s=default;
bh=gc/m7/ze1DYb9Xlerk4x21oNNeQ=; b=ay4FxL9Dp87rvOkoO3xV71HwinCV
HbsrFHY78+ZXTfZdcYVEBoZ7WVaoDfna25VNIehr9x4dcVw5xEHoRbbZWtbSMW/d
gCW4UsKQ+wFtTHqCzWhtcwqMvou3Dnz4uUlG4NIa4jBB6HxwEfPgSjWun9exBdck
jkZgX053notgoeA=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-5.4 required=5.0 tests=AWL,BAYES_00,KAM_LAZY_DOMAIN_SECURITY autolearn=no version=3.3.2
X-HELO: calimero.vinschen.de
Date: Sat, 28 Nov 2015 16:54:21 +0100
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: [ANNOUNCEMENT] TEST RELEASE: Cygwin 2.4.0-0.4
Message-ID: <20151128155421.GX2755@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <announce DOT 20151121162447 DOT GF2755 AT calimero DOT vinschen DOT de> <CABPLASTKt3uKcAbeLNjVa89wrWi_LO6MnPD0Fd=T0FxJG0r5mA AT mail DOT gmail DOT com> <20151126131633 DOT GL2755 AT calimero DOT vinschen DOT de> <CABPLASTpsNA4vGtONb14dQ87UV1gY=UAeHBgEXUmgztDeny_mg AT mail DOT gmail DOT com> <CABPLASRpe+ey=dzuzkKYhu4UV=A10y9RkOzLxxA7v4o5CPtSag AT mail DOT gmail DOT com>
MIME-Version: 1.0
In-Reply-To: <CABPLASRpe+ey=dzuzkKYhu4UV=A10y9RkOzLxxA7v4o5CPtSag@mail.gmail.com>
User-Agent: Mutt/1.5.23 (2014-03-12)

--6zn93sY2JrH9m7VZ
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Nov 27 20:15, Kacper Michajlow wrote:
> 2015-11-27 20:02 GMT+01:00 Kacper Michajlow <kasper93 AT gmail DOT com>:
> > 2015-11-26 14:16 GMT+01:00 Corinna Vinschen <corinna-cygwin AT cygwin DOT com>:
> >> Hi Kacper,
> >>
> >> On Nov 23 19:09, Kacper Michajlow wrote:
> >>> 2015-11-21 17:24 GMT+01:00 Corinna Vinschen <corinna-cygwin AT cygwin DOT co=
m>:
> >>> > Hi Cygwin friends and users,
> >>> >
> >>> >
> >>> > I released a new TEST version of Cygwin, 2.4.0-0.4.
> >>> >
> >>>
> >>> With this version I get permissions denied when trying to chmod a
> >>> folder created in a created folder...
> >>>
> >>> Basically this doesn't work for me:
> >>> mkdir test
> >>> mkdir test/test
> >>> chmod 755 test/test
> >>
> >> I need to see the ACLs of the parent dir of test, the ACL of test and
> >> the ACL of test/test via the icacls command, before calling chmod.
>=20
> I'm using Microsoft account. Here is requested information

I can't reproduce this.  I'm using a local test account which is connected
to a Microsoft account.  The permissions of the parent folder are identical
to yours:

> $ pwd
> /home/Kacper
> $ icacls .
> . DOMEK\Kacper:(F)
>   Wszyscy:(RX)
>   TWORCA-WLASCICIEL:(OI)(CI)(IO)(F)
>   GRUPA TWORCOW:(OI)(CI)(IO)(RX)
>   Wszyscy:(OI)(CI)(IO)(RX)

  $ icacls .
  . VMBERT8164\local_000:(F)
    Everyone:(RX)
    CREATOR OWNER:(OI)(CI)(IO)(F)
    CREATOR GROUP:(OI)(CI)(IO)(RX)
    Everyone:(OI)(CI)(IO)(RX)

> $ mkdir test
> $ icacls test
> test NULL SID:(DENY)(Rc,S)
>      DOMEK\Kacper:(F)
>      DOMEK\Kacper:(RX)
>      Wszyscy:(RX)
>      NULL SID:(OI)(CI)(IO)(DENY)(Rc,S)
>      TWORCA-WLASCICIEL:(OI)(CI)(IO)(F)
>      DOMEK\Kacper:(OI)(CI)(IO)(RX)

       ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ See below

>      GRUPA TWORCOW:(OI)(CI)(IO)(RX)
>      Wszyscy:(OI)(CI)(IO)(RX)

  $ mkdir test
  $ icacls test
  test NULL SID:(DENY)(Rc,S)
       VMBERT8164\local_000:(F)
       VMBERT8164\local_000:(RX)
       Everyone:(RX)
       NULL SID:(OI)(CI)(IO)(DENY)(Rc,S)
       CREATOR OWNER:(OI)(CI)(IO)(F)
       CREATOR GROUP:(OI)(CI)(IO)(RX)
       Everyone:(OI)(CI)(IO)(RX)

Note that in my case the inheritable explicit permissions for the
owner account (^^^^^) are not generated, which is already puzzeling
just by itself.

But the test/test icacls output explains why chmod fails:

> $ mkdir test/test
> $ icacls test/test
> test/test NULL SID:(OI)(CI)(DENY)(Rc,S)
>           DOMEK\Kacper:(F)
>           TWORCA-WLASCICIEL:(OI)(CI)(IO)(F)
>           DOMEK\Kacper:(OI)(CI)(RX)
>           DOMEK\Kacper:(RX)
>           GRUPA TWORCOW:(OI)(CI)(IO)(RX)
>           Wszyscy:(OI)(CI)(RX)

This is how the ACL looks like after creating the directory, but before
Cygwin performs ACL post-processing.  The only possible reason for this
is that already the mkdir call failed to fix the ACL.  But it's not clear
why this happens.  Your account has "F"ull permissions, so it also has
WRITE_DAC permissions.

> Tell me if you need any more info.

Yes.  First of all, please send cygcheck -svr output as requested on
http://cygwin.com/problems.html.

Next, when you wrote "With this version ...", does that mean this
is a regression from 2.4.0-0.2 to 2.4.0-0.4, or did you compare with
2.3.1-1?  I'm asking because I'd like to know in which version the
regression occured.

Is "DOMEK" the name of your local machine or an AD domain?

What filesystem is that on?  Local or remote share?  Real NTFS or some
other filesystem?  I'm asking because on some remote filesystems even
the owner of a file may have no WRITE_DAC permissions, despite having
supposedly "full" permissions.

Can you please rmdir test/test and then run mkdir under strace:

  $ strace -o mkdir.trace mkdir test/test

and attach the trace file to your reply?  Please use ther latest
2.4.0-0.5, just to be sure.

Please also attach the output of `id' and of `getfacl . test test/test'.


Thanks,
Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--6zn93sY2JrH9m7VZ
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=tdI+
-----END PGP SIGNATURE-----

--6zn93sY2JrH9m7VZ--

- Raw text -


  webmaster     delorie software   privacy  
  Copyright © 2019   by DJ Delorie     Updated Jul 2019