X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:from:to:subject:date:message-id:in-reply-to
	:reply-to:mime-version:content-type:content-transfer-encoding;
	q=dns; s=default; b=wEvjzk4o+vo0bJSdNhbL8z/O+0Q+FuD7hgulsyqIwEU
	bDE/tGvxiMRBJs2ttUGZIYgl9Fbyql4Wn3APHHmUBBvxWX0QOQgIMRZueDS7D094
	RTWNTvO7tvd7sBPofS1m0TBywOVVJG3377yEZ7n/t1wccbtjDyqflkY4BdgKg1sA
	=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:from:to:subject:date:message-id:in-reply-to
	:reply-to:mime-version:content-type:content-transfer-encoding;
	s=default; bh=WVi2+QhsZ3u8yNQlFUhlscGn+qs=; b=Y3LbqVtLWO6WAJQIt
	gd8r9xz5z0FqtknL34wZr7SB/KqWjfLaPtXw9AMdSJQPHJuQSyrMa84lM4KmOw5d
	/lDYQR/YarTfYr7vA0OzsfWDAeU0Lbj/y7oGIpSuOFt4GC+bJJVo1MhV44wk7zvr
	/DEOd3WRXpfW4E8hv2F96RWFrc=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=-2.3 required=5.0 tests=AWL,BAYES_00,FREEMAIL_FROM,RCVD_IN_DNSWL_LOW,SPF_PASS autolearn=ham version=3.3.2 spammy=0644, umask, non-canonical, noncanonical
X-HELO:	mail-wm0-f54.google.com
X-Google-DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:subject:date:message-id:in-reply-to :reply-to:user-agent:mime-version:content-type :content-transfer-encoding; bh=DBnXU7fpiW8uyDT73/2gjEH2gnlm8PQekmvoBs9i2SM=; b=JhJWTHWmePA/83ikVzuIxdBxFOCgqcKjAKkJy8fSLPu96Mx6Y9shytBVsV0YbEm/Qp m66KaZ9afk9OaxjrS2OUbfthNJPI91/FJAJeqGf1lBA3UOfeMzMghkhj/DRO31aNPZdX LC7bs5sCUWhm2hs5fUKg1TgcBJBeSn/uTASJ/o7sfnbrA/wief9+nWiT5Z5iW0TyxtCv ZK4kEqbT3LeQTNVjiXuQCxNv4t8DSHtUVPmdccenFrWerBlbo5bSrhdu+bpYt5Rh/lTH lpWB3SQEHa9/XaQlYJ+KYWgSZhiKTUnXlFfx0lbWWX3SQ7y2fKslPpQuehkkFlpZ8O87 PB1g==
X-Gm-Message-State:	AG10YOT6CkqQaPtqnn3xXIO7ds6m/w7XD9j6MduU0Z910J1X4ganGH6HKCH+WxSQaRkl4A==
X-Received:	by 10.28.102.68 with SMTP id a65mr7427069wmc.12.1455051201902; Tue, 09 Feb 2016 12:53:21 -0800 (PST)
From:	xnor <xnoreq AT gmail DOT com>
To:	cygwin AT cygwin DOT com
Subject:	Re[2]: Issues with ACL settings after updating to the latest cygwin.dll
Date:	Tue, 09 Feb 2016 20:53:24 +0000
Message-Id:	<embea8f98a-05a5-4804-a575-9eebf7412614@gaming>
In-Reply-To:	<20160208181956.GI12975@calimero.vinschen.de>
Reply-To:	xnor <xnoreq AT gmail DOT com>
User-Agent:	eM_Client/6.0.24316.0
Mime-Version:	1.0
X-IsSubscribed:	yes
X-MIME-Autoconverted:	from quoted-printable to 8bit by delorie.com id u19KrdQJ018514

>Not sure what Transmission is, but files downloaded with POSIX
>tools are usually not executable.  For instance, download Cygwin's
>setup-x86.exe with wget.  Then try to execute it.  It won't since
>the permissions are set according to your umask and without execute
>permissions, e.g., 0644.  This is normal.
The behavior has changed with the ACL change in Cygwin and I would not 
consider that "normal". The warning from Windows is not normal.

I realize that the previous implementation was already problematic and 
messed with permissions but I did not notice it since it never denied 
executing executables.


>The permissions must *not* be reordered.  If Cygwin creates permissions
>incorrectly it's one thing, but the order to emulate POSIX permissions
>is non-canonical.  Reordering them will break them.
>
>Please provide the exact output from icacls.
They *have* to be reordered to be modifiable in Windows/Explorer. In 
other words, if I want to change permission the new ACL behavior ensures 
that it breaks the Cygwin permissions?


Here is the output from icacls /saveacl for some file:
D:P(D;;RPWPDTRC;;;S-1-0-0)(A;;0x1f019f;;;S-1-5-21-559282050-488988736-2019639472-1001)(D;;WP;;;AU)(D;;WP;;;SY)(D;;WP;;;BA)(D;;WP;;;BU)(A;;FR;;;S-1-5-21-559282050-488988736-2019639472-513)(A;;0x1201bf;;;AU)(A;;0x1201bf;;;SY)(A;;0x1201bf;;;BA)(A;;0x1200a9;;;BU)(A;;FR;;;WD)

After letting Windows fix the order:
D:PAI(D;;RPWPDTRC;;;S-1-0-0)(D;;WP;;;AU)(D;;WP;;;SY)(D;;WP;;;BA)(D;;WP;;;BU)(A;;0x1f019f;;;S-1-5-21-559282050-488988736-2019639472-1001)(A;;FR;;;S-1-5-21-559282050-488988736-2019639472-513)(A;;0x1201bf;;;AU)(A;;0x1201bf;;;SY)(A;;0x1201bf;;;BA)(A;;0x1200a9;;;BU)(A;;FR;;;WD)

Here is what's "normal" for Windows if I create a file under a new 
folder on C: in Explorer:
D:AI(A;ID;FA;;;BA)(A;ID;FA;;;SY)(A;ID;0x1200a9;;;BU)(A;ID;0x1301bf;;;AU)

Strangely enough this is displayed as "-rwxrwx---+ MyUser None" with `ls 
-l` even though my user is in the group Administrators.


Here is what I would expect:
MyUser is in the group Administrators. Given the inherited permissions 
above a Windows-created file should be shown as "-rwxrwxr--+ MyUser 
Administrators"?

After chmod 664 I would expect this:
- still inherit all the permissions
- add permission MyUser DENY execute
- add permission Administrators DENY execute
- add permission Everyone ALLOW read

Instead Cygwin copies all permissions, drops the inheritance, copies 
them again, adds None, adds NULL SID ...

After a consecutive chmod 770 I would expect the above non-inherited 
permissions to be removed again.



--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -