X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=fyoDlg6QuhjLm+ZXY+jT75BVGVbc/cbYMVH3UNcKGA3CUIYTVBZ0A
	8FAf+OW07sJICBUwCoOCkQRLLIpq7IcYvkNXdIFgne9mM+cWWhEa6+OTCYrBPnTQ
	BXRUE15+uZaASEqNSdAiZ1tjJhdeGYq/dE0LojlrHpeZsRswcRcS1U=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	bh=ukymF4wWGBZa4+90jWiudkID6JA=; b=qXOp+lXHCB2ZDD65616EZwMAAsFx
	oGjdVhRSiUm175rNIsW/itpI9OUj+HRf5PTi+dvN/tieOJ1hVtJ5iVZTHmvmulRG
	eYTEilO0UEV5n59RqdSRKj6OrtkzgpZ+Ry6Gi3cH1zrJSo9ojpFtET2qwtWe6PY5
	AK4r7WLrxBX/Fp0=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=-96.6 required=5.0 tests=BAYES_00,KAM_LAZY_DOMAIN_SECURITY,RCVD_IN_PBL,RDNS_DYNAMIC,USER_IN_WHITELIST autolearn=no version=3.3.2 spammy=H*R:D*cygwin.com, H*R:U*cygwin, xnor, H*f:sk:ema890e
X-HELO:	calimero.vinschen.de
Date:	Mon, 8 Feb 2016 19:19:56 +0100
From:	Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To:	cygwin AT cygwin DOT com
Subject:	Re: Issues with ACL settings after updating to the latest cygwin.dll
Message-ID:	<20160208181956.GI12975@calimero.vinschen.de>
Reply-To:	cygwin AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
References:	<20160208141643 DOT GE12975 AT calimero DOT vinschen DOT de> <ema890e8d3-646a-4b89-9145-20f27329927f AT gaming>
MIME-Version:	1.0
In-Reply-To:	<ema890e8d3-646a-4b89-9145-20f27329927f@gaming>
User-Agent:	Mutt/1.5.24 (2015-08-30)

--VkVuOCYP9O7H3CXI
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Feb  8 17:48, xnor wrote:
>=20
> >I'm not quite sure what you observe there.  The NULL SID ACE only
> >contains extra information about some POSIX bits and the MASK value.
> >It's existence and setting should not influence what you can do with the
> >file.  The permission bits are explicitely set elsewhere in the ACL.
> >
> >Can you reproduce the issue so that I can see what's going on?  I need
> >the icacls output for the file and its parent directory, as well as the
> >output from getfacl for both.
> I have the same problem with Transmission.
>=20
> I noticed this first when I tried to execute an exe that was downloaded w=
ith
> Transmission compiled in cygwin. When trying to start the exe from Explor=
er
> an error dialog will appear:
> "Windows cannot access the specified device, path, or file. You may not h=
ave
> the appropriate permissions to access the item."

Not sure what Transmission is, but files downloaded with POSIX
tools are usually not executable.  For instance, download Cygwin's
setup-x86.exe with wget.  Then try to execute it.  It won't since
the permissions are set according to your umask and without execute
permissions, e.g., 0644.  This is normal.

> When going to file properties - security I get an information dialog wind=
ow:
> "The permissions on <program> are incorrectly ordered, which may cause so=
me
> entries to be ineffective."
>=20
> Proper permissions (of parent folder) look like this:
> Authenticated Users: modify
> SYSTEM: Full control
> Administrators: Full control
> Users: Read & execute
>=20
>=20
> The permissions of the cygwin/transmission created files are (manually
> translated from German):
> NULL SID: special
> <My User>: special
> Authenticated Users: Browse folder / Execute file
> SYSTEM: Browse folder / Execute file
> Administrators: Browse folder / Execute file
> Users: Browse folder / Execute file
> Nobody: Read
> Authenticated Users: Read, write, execute
> SYSTEM: Read, write, execute
> Administrators: Read, write, execute
> Users: Read, Execute
> Everyone: Read
>=20
>=20
> Also when going to advanced permissions it shows the same incorrectly
> ordered warning and asks me to re-order permissions.

The permissions must *not* be reordered.  If Cygwin creates permissions
incorrectly it's one thing, but the order to emulate POSIX permissions
is non-canonical.  Reordering them will break them.

Please provide the exact output from icacls.


Thanks,
Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--VkVuOCYP9O7H3CXI
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQIcBAEBCAAGBQJWuNxMAAoJEPU2Bp2uRE+gxWYP/j7diD/hrJgFvaksOlM5lWKD
JzOafXU9tlN6xy0jUB4zipW8MIoDB3cG0JM+abBdSEBEtSuGeeZsiylMp4/e0msA
VL9+/y2NLY+vhNXmodNMB8vPJkumOrvewCfpvRyZGR8nrzS+BKPJktUxGimmtlMT
irqkqtz4hQ6kR0ep7lHIXP9BsNy6UN4a1QS9a1IEyrkSfbSog92ldDG6oHG6UlQp
0DZNd9H3vmbkR3wF9ZCo3KH+KSBtCqaYAJOQvcyhMysFd3dpIhOr9mO6RsWU/XS5
qM/jf5JQh4J11BCRGkhhG8bwmx/PxoPqV5JaJs9eMoSg1ZVRHeZJ64w9aZdZOma5
JgEUjdMQ6H+uTahpfvDHWB+GzT7FxXAK8Psv08hJGR2FxYny5XcXKg+sgfzfdZzt
2mqiuVGgr7fj55VvCXzMy5gowyFsNkUZe1hZGtJviUWmV1SW5/Bty9PsFs5KLA9g
X0E1Dis7lp18yyd2eIRRrjpsbPdTkvH/YC9bSLH22/+AfuodUe6SoSU31ed1wFoU
Uv6Jn17yJ8GRJeujjDDkI4PK2QFaZJtZYgyCZwmVsn6hahJnzhpPa9+z+c2E2Vmd
cmWTOLa6K3GsMnyTAnBD2OkAbeVBL5B0ki2QbaPhKgmwTLYi+xQ/DJSvtkVlDpHt
qfqnas+9Q1EXVoMIzGx5
=d7Ir
-----END PGP SIGNATURE-----

--VkVuOCYP9O7H3CXI--

- Raw text -