X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:from:to:subject:date:message-id:reply-to
	:mime-version:content-type:content-transfer-encoding; q=dns; s=
	default; b=otJjCgNjnyO6RhC2UYSSG3QNXQSd3Zl+emQKjDBwtfTwlYqWsX9aq
	bshkNwRAwrhwkKpI7ylusVy7/GAO9XOEonCk82ibc4aNzOrRrrRj+MrxyeX9hCLK
	/DQH8oTuFSX+gj23OrqTiwAy8kUjAXu9GL50d24AWhj8gQiC2rcd10=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:from:to:subject:date:message-id:reply-to
	:mime-version:content-type:content-transfer-encoding; s=default;
	bh=k2oiw3bfSAXF7bUmeDUK0q61pmA=; b=hlqswtI+w4dOrWBcU3ugUgm5zUbp
	GgKFnn4TTJzBlWW02ow43TzV3SjAG7LRGrxlLEGNDFqLld0nRI0H43v2VNANcz/z
	zrvCwhjrCykpmUqeMxMKGutlmh52ryWxu5rcRYMBFkcGBICTMu05uKF9azEt7rpW
	vXPH335sqUCgiGw=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=-1.5 required=5.0 tests=AWL,BAYES_20,FREEMAIL_FROM,RCVD_IN_DNSWL_LOW,SPF_PASS autolearn=ham version=3.3.2 spammy=cygwin-ug-net, cygwinugnet, joke, scroll
X-HELO:	mail-wm0-f46.google.com
X-Google-DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:subject:date:message-id:reply-to :user-agent:mime-version:content-type:content-transfer-encoding; bh=qitQlH7cfLRZcP2YVPDaDZz2FDZxGFP2q7e6JOXaSqY=; b=VfrMPdCY7YoYkmMLYknCIN1aDS8X0CgWB/V0vFV/0iTY6BqRhAfLwAR+Itb9x9Fc7V kdbVJjlSACoBY5m0/7Y22fatjop7CXCFOiojauOzkS2YxrXyODKvqpYc15OeEzdacs6C bo9M+5qr+5r/rzM3wURuMC6G6eE71HnWWRbsLNtH/v83oPAZVYs+b3kzbV7etu2HCK/n bQCFc4+DLI9lY1s5hG7nGvVztvWlOhEQQ4cqPeEgiJOALLWj09Py8E2NHMs5Bw+un201 R9hpTx8h5eYsiyXPTNbg/J0QeWsA9oK/m6awguEuCCJKhGMMxqqsWrPbCYXKiMHMRWbb mT7A==
X-Gm-Message-State:	AG10YOT0AwcNeGnvL+HHe7J5ac9riiKRBiOST5v6RFIQZgcqIEvnMc2f2er5BeJXD7ElhQ==
X-Received:	by 10.28.220.134 with SMTP id t128mr12284454wmg.61.1455128272934; Wed, 10 Feb 2016 10:17:52 -0800 (PST)
From:	xnor <xnoreq AT gmail DOT com>
To:	cygwin AT cygwin DOT com
Subject:	Re[2]: Issues with ACL settings after updating to the latest cygwin.dll
Date:	Wed, 10 Feb 2016 18:17:58 +0000
Message-Id:	<ema091e9e3-10a6-4b7d-82af-71a10c2b9077@gaming>
Reply-To:	xnor <xnoreq AT gmail DOT com>
User-Agent:	eM_Client/6.0.24316.0
Mime-Version:	1.0
X-IsSubscribed:	yes
X-MIME-Autoconverted:	from quoted-printable to 8bit by delorie.com id u1AIIEOd004917

>Which warning do you mean here?
The "permissions out of order" one. This was not the case before, at 
least not on my installation, so I don't see how this can be called 
normal.


>Come on, be fair.  The new ACL handling started out early 2015, got a
>break when I realized that it doesn't work as is, and then got a new
>test phase starting back in September.  Except for minor bugs it seemed
>to work rather well.  Nobody reported this effect in all the 4 months 
>of
>test period.  You don't actually think I wouldn't have fixed it prior
>to the release if I had known about it, do you?
2.4.0-1 was released ~3 weeks ago. I had actually upgraded a few days 
earlier to a TEST version and noticed that a cygwin downloaded exe 
couldn't be executed but assumed the exe was corrupt and didn't 
investigate...
Then a few days ago the same thing happened again. Now I'm here.

Anyway, clearly most users are just that: users, and not testers that 
will install and test TEST versions.


>They are not supposed to be modifiable in Explorer.  If you want to
>change permissions on a Cygwin ACL, use chmod or setfacl.
Is this a joke?


>
>>  Here is the output from icacls /saveacl for some file:
>>  
>>D:P(D;;RPWPDTRC;;;S-1-0-0)(A;;0x1f019f;;;S-1-5-21-559282050-488988736-2019639472-1001)(D;;WP;;;AU)(D;;WP;;;SY)(D;;WP;;;BA)(D;;WP;;;BU)(A;;FR;;;S-1-5-21-559282050-488988736-2019639472-513)(A;;0x1201bf;;;AU)(A;;0x1201bf;;;SY)(A;;0x1201bf;;;BA)(A;;0x1200a9;;;BU)(A;;FR;;;WD)
>Doh, I'm sorry, but I can't read this format very well.  Can you please
>again send the standard icacls output as well as the output from 
>getfacl
>of the parent dir and the created file?  I'd like to have this problem
>fixed, but I need your help.  As I said, it works fine for me and 
>without
>being able to reproduce I'm somewhat at a loss.
You can import this by putting it in a textfile and using icacls 
testfile /restore acl.txt.
As I've said before, my Windows is German. icacls output will be 
localized. Do you really want that?
What I posted is the only portable way to share ACLs.


>
>>  Here is what's "normal" for Windows if I create a file under a new 
>>folder on
>>  C: in Explorer:
>
>If you don't want POSIX perms, but standard Windows perms, use the 
>"noacl"
>mount option.  See 
>https://cygwin.com/cygwin-ug-net/using.html#mount-table
I guess that is my only option right now.

>
>>  Here is what I would expect:
>>  MyUser is in the group Administrators. Given the inherited 
>>permissions above
>>  a Windows-created file should be shown as "-rwxrwxr--+ MyUser
>>  Administrators"?
>
>Sorry, can't do that, *unless* you make "Administrators" the primary
>group in your user token(*).
Ok, so the group is "None". No big deal.

So what about fixing the permissions like I described?
So the permissions would be "-rwx------+ MyUser None" in Cygwin for a 
Windows-created file with default ACL.

By using the inherited default ACLs there should be at most 3 additional 
ACLs (+1 for NULL SID whatever that is doing):
- deny r/w/x for user ("MyUser")
- allow r/w/x for group ("None")
- allow r/w/x for other ("Everyone")

And leaving the inherited ones untouched, right?
But if you scroll up you will see that in my system Cygwin kills the 
inheritance and I end up with 12 new ACL entries for each file.


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -