X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=ZuyQ5Fu64VysQWKGd4Hj3sx0EycQ+246K+OHvr/eWrBDAFTNHF2h1
	cu+gafU/rXVzQRXqAg9/j+iM/QPj/88ShdH3u9lBpReACh1jW1VWLEm8zL3TJd3y
	9ODSPonljqgrFlbe7Wa89CsVZ1ldwPPox4hYdBTwrOH4w9HdxT7B+A=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	bh=9BJvYv3OsYFI32PrMWJL49cGaRw=; b=gVhdHgXA/eGH+LkcAbjSiddQvWne
	fglKqb3nLNKjI5JsIvLMLLajYvOIw5PConMSqh46oXde7dtKIdJ/R3n9snK6SmFP
	qZWknRnEmmgOxPmn2RTnbjv/W+3H/MXC6HuvFfXZ8/V+JfB4rkjrfps5hhZwCwWH
	5WJ1QiFSwAXv8Xs=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=-3.3 required=5.0 tests=AWL,BAYES_00,KAM_LAZY_DOMAIN_SECURITY,RCVD_IN_PBL,RDNS_DYNAMIC autolearn=no version=3.3.2
X-HELO:	calimero.vinschen.de
Date:	Wed, 9 Dec 2015 11:46:50 +0100
From:	Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To:	cygwin AT cygwin DOT com
Subject:	Re: FindFirstFile fails for some network directories
Message-ID:	<20151209104650.GA2747@calimero.vinschen.de>
Reply-To:	cygwin AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
References:	<CAGHpTBKEWFa8M1KN6_vqrBT6WOjVpmOCUqP-LHBYK=FApg2fJg AT mail DOT gmail DOT com> <CAGHpTB+O-Z3Mir-4ZV7Wmh3dqo=rqfy+-CAW_KCE2hQdCjhB5w AT mail DOT gmail DOT com> <CAGHpTB+cGrO6xrsaR=LoUdTAvmiHWJYty9=+ErJ2aW-FDpbbqA AT mail DOT gmail DOT com> <CAGHpTBJeR9H7YkW=_U7U287vuSoHco6X4Z=iEBLRBo4dRRy58Q AT mail DOT gmail DOT com>
MIME-Version:	1.0
In-Reply-To:	<CAGHpTBJeR9H7YkW=_U7U287vuSoHco6X4Z=iEBLRBo4dRRy58Q@mail.gmail.com>
User-Agent:	Mutt/1.5.23 (2014-03-12)

--jI8keyz6grp/JLjh
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Dec  9 11:43, Orgad Shaneh wrote:
> On Wed, Aug 19, 2015 at 8:28 AM, Orgad Shaneh <orgads AT gmail DOT com> wrote:
> >
> > On Wed, Aug 19, 2015 at 8:46 AM, Orgad Shaneh <orgads AT gmail DOT com> wrote:
> > > Working capture: https://gist.github.com/orgads/d2681881668afb9cb08f
> > > Failing capture: https://gist.github.com/orgads/4f0ea2b26cfd64f4353d
> >
> > I just found another SMB1 linux server, which does work[1].
> >
> > It first has a "NT Create AndX" request for path \, which succeeds.
> > Then it issues Trans2 FIND_FIRST2 request for the real path (\a).
> >
> > This issue might be related to the Archive bit which is set on aclnas01.
> >
> > - Orgad
> >
> > [1] https://gist.github.com/orgads/e76a00c2cc0fc8a43d95
>=20
> Hi,
>=20
> After investigation, I found that the root cause for this problem is
> set_cygwin_privileges, which sets SE_RESTORE_PRIVILEGE and
> SE_BACKUP_PRIVILEGE for the process during initialization.
>=20
> Commenting out these 2 lines solves the problem for me.
>=20
> Can you tell why are they needed at all? There is a comment there:
>=20
>     Allow to access all files, independent of their ACL settings.
>=20
> What does it mean?

These are the user privileges required to allow an admin user accessing
files which don't give him permissions to do so, just like a POSIX root
user.  The usual behaviour of a filesystem should be to refuse the
setting without to fail.


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--jI8keyz6grp/JLjh
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQIcBAEBCAAGBQJWaAaaAAoJEPU2Bp2uRE+gDXwQAJZs5xtwcWd8pbyZvcGvMrWW
2laY/vUp7SQF168anET3QlTTXTTkMZXZfO15y4iB3MI5zHKZiJMRk9a6DqU28xra
t6z1rcVZVhqjhwUIvqdtBGNWAVqBRREn7FA+9lHSjGt74/x7C2MGQG+w6RjjzkRZ
EUXZtgw1qQ58pf8ooVXIroN3vD44gINkwaT8xBpKMwyoLo5Z7bTReigjiq/Ht6+z
N5pe4hLsg8CV4n6HkSPe9Xa5E9HNwO4QO4myYbG+MF2ACW0zEJx97b+E0FSa4Pdc
pRQktRgF8NZ+mqaqJMUZbM5VtGcIWt3Fuimxx3A6jrNYvJgidYxQAiV1JFaJbY7g
FIa1vc6ia5m5AXWa+pviyBwfj7iJ/AsgBspK/vYGU6b6U6zLk34gdM52qR8iopos
112JTHyG/zHdkeZ1dCTk2xECjScp3s6ImHueb3GKU0pqHHfLA9JMdG+zDTtZKJGm
n3kFs0DjxktKF/d/NePmdwuUoR/s3ce8iIBjBk3MLeAudJLFMUihZL7ivpMGdwWj
QncqW3vrq0Bdt5uvH0bh4bR8BUiYoDp6s8GXRD4gAspzV06AycCJdEyDMSYo4i2K
20czR3Fl8SU/qArAGoci/tGuh7ZnpOmL+gWJjJExnT1Jl+JwIqsgMKSgXzajQYJn
eC2FDXyG0nVpGCPRUoSD
=62jn
-----END PGP SIGNATURE-----

--jI8keyz6grp/JLjh--

- Raw text -