X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:from:to:subject:date:message-id:references
	:in-reply-to:content-type:content-id:content-transfer-encoding
	:mime-version; q=dns; s=default; b=Jvl8821XqdjWg4AF1rSXgsLHf/3AD
	wG4m3IAiZBJz43c+R3ldJWpl6ZzqsnUIXlbclf1UDupRbUgrfF/5hPbNLiWIIoo1
	EuFVRVwYCaVaeif4IbWxfSEfB+JjiKwl15MbaeYt9Ik1JJjbso7JzD1Np3fo2KcH
	oRetXV/CLXzOoQ=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:from:to:subject:date:message-id:references
	:in-reply-to:content-type:content-id:content-transfer-encoding
	:mime-version; s=default; bh=gmIajQ38uF4nBjHIPEb9AGQPU0o=; b=W2y
	4RmXmXHwsR+dd3BTORE6EdYTbRJTDxr0Xx+ksWYSGfvJ6XpXr5DVG8ORCN0x3262
	4nXQZBnvw3UToghV9VOHjAVk0TmWaThmcEz/fX8AmK/7rkxPcHmEKzpbDfDted1+
	9EqJ0M3QNQCr8c6U6WBx+TNAdTOydMQDBus/t+O4=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=2.1 required=5.0 tests=BAYES_00,CYGWIN_OWNER_BODY,MIME_BASE64_BLANKS,RCVD_IN_DNSWL_NONE,SPF_HELO_PASS,SPF_PASS autolearn=no version=3.3.2 spammy=contacts
X-HELO:	na01-by2-obe.outbound.protection.outlook.com
From:	Bill Zissimopoulos <billziss AT navimatics DOT com>
To:	"cygwin AT cygwin DOT com" <cygwin AT cygwin DOT com>
Subject:	Re: POSIX permission mapping and NULL SIDs
Date:	Fri, 24 Jun 2016 22:31:22 +0000
Message-ID:	<D39300B0.9667%billziss@navimatics.com>
References:	<D392BA70.95D4%billziss AT navimatics DOT com> <20160624195144 DOT GB27089 AT calimero DOT vinschen DOT de> <D392F074.962E%billziss AT navimatics DOT com> <20160624215948 DOT GD27089 AT calimero DOT vinschen DOT de>
In-Reply-To:	<20160624215948.GD27089@calimero.vinschen.de>
authentication-results:	spf=none (sender IP is ) smtp.mailfrom=billziss AT navimatics DOT com;
x-ms-exchange-messagesentrepresentingtype:	1
x-ms-office365-filtering-correlation-id:	0e6a482d-f5b5-4f00-dd33-08d39c7f453e
x-microsoft-exchange-diagnostics:	1;CY1PR07MB2198;6:AP0LeKSYAUx2Kmu1PYqJ6Jb+tWp9+mo8XlUs4FNWLD5xeWtwMO6rP/6e4SDBfnxeEwGHCRwNNQKoII/tQE4XkFE6sTDT4lqUHVvG8GIgZfJ0gS/qjuaRMi8U0FuKaEGS7Q6aEVQRzLUTUnTAJECdFRyMjQctDN1LJh819t6nN0YENhS4k2YC38qEcHU1fe9JuJXATOCooyj0c03b4bFgJLpqlTdTJRtzuqidCxsEUhqpl3PzqDKDCOn6LgZpOrsuFjnaScwFqbfaL1eXyhCKjuNMDWwuTYCHGfYz3er4O4Hr3yJWAEShdhDTsz+vpKVW6uQ4jdibJ04rkOQ78dO6jA==;5:vkKM/6AUcWxNvyGrBW86Wq0ZPi2Cdit3N7nwRTc3WDi+XpE3t1jmtVwYkDYF9sUse7W8E5kctENCqz9imrzR4ySxPrNsTQn3ZrC4NA8jtDuwEWKUz7FkVNDVxj7RAnZakBAOJGsiUda6aVDyh/jhwQ==;24:RONxfz3EUgOi4wbKAv3NWKYBeqy+osmOj28s+zYNrGpW7DXgCGnc0h19u4fdmaCRwTnEajPcNbyLeBT0d29DDYldlFtcfvxZHEikCgpwTXc=;7:/dLGq+YtlouNvTWFkbLiioPyE1t1McToA6tz7/41/o8132juCc4pWSG/K0hb8BxFtM0UaeiSCSj7nb9sVhqrqZVD20/PGu85Eg0jtSk/P+gAtMhMvTsUTXgfcwtIMl+WvebRt9SSc5gSLWFSXkYneBZxnTjwq8RMuVq8Oxqc+RDd2fJmjnA9lEeQywW3ZWWHNg9HhxnPGqeu7Mpqd9kkiVeRyjtawSNhjxGfofbtj4s93/6zKSWvJ1UDueYdNhng84jx92ZMn/j5pXHiGJSc5g==
x-microsoft-antispam:	UriScan:;BCL:0;PCL:0;RULEID:;SRVR:CY1PR07MB2198;
x-microsoft-antispam-prvs:	<CY1PR07MB21984885CEBA13A779C1F9BFBC2E0 AT CY1PR07MB2198 DOT namprd07 DOT prod DOT outlook DOT com>
x-exchange-antispam-report-test:	UriScan:;
x-exchange-antispam-report-cfa-test:	BCL:0;PCL:0;RULEID:(6040130)(601004)(2401047)(8121501046)(5005006)(10201501046)(3002001)(6041072)(6043046);SRVR:CY1PR07MB2198;BCL:0;PCL:0;RULEID:;SRVR:CY1PR07MB2198;
x-forefront-prvs:	0983EAD6B2
x-forefront-antispam-report:	SFV:NSPM;SFS:(10019020)(6009001)(7916002)(24454002)(189002)(377454003)(55674003)(199003)(11100500001)(110136002)(66066001)(92566002)(8676002)(7846002)(2906002)(122556002)(50986999)(77096005)(76176999)(54356999)(81156014)(450100001)(86362001)(107886002)(2501003)(19580405001)(19580395003)(68736007)(93886004)(1730700003)(7736002)(2950100001)(2900100001)(189998001)(5640700001)(97736004)(81166006)(305945005)(2351001)(10400500002)(586003)(105586002)(6116002)(102836003)(3846002)(36756003)(8936002)(3660700001)(101416001)(99286002)(106116001)(106356001)(5002640100001)(3280700002)(87936001)(94096001);DIR:OUT;SFP:1102;SCL:1;SRVR:CY1PR07MB2198;H:CY1PR07MB2199.namprd07.prod.outlook.com;FPR:;SPF:None;PTR:InfoNoRecords;MX:1;A:1;LANG:en;
received-spf:	None (protection.outlook.com: navimatics.com does not designate permitted sender hosts)
spamdiagnosticoutput:	1:99
spamdiagnosticmetadata:	NSPM
MIME-Version:	1.0
X-OriginatorOrg:	navimatics.com
X-MS-Exchange-CrossTenant-originalarrivaltime:	24 Jun 2016 22:31:22.2566 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader:	Hosted
X-MS-Exchange-CrossTenant-id:	21071be9-4f9a-413b-89ac-8353a5d2410a
X-MS-Exchange-Transport-CrossTenantHeadersStamped:	CY1PR07MB2198
X-IsSubscribed:	yes
X-MIME-Autoconverted:	from base64 to 8bit by delorie.com id u5OMVleS004893

On 6/24/16, 2:59 PM, "Corinna Vinschen" <cygwin-owner AT cygwin DOT com on behalf
of corinna-cygwin AT cygwin DOT com> wrote:


>>>If you want some specific mapping we can arrange that, but it must not
>> >be the NULL SID.  If you know you're communicating with a Cygwin
>>process,
>> >what about using an arbitrary, unused SID like S-1-0-42?
>> 
>> I am inclined to try S-1-5-7 (Anonymous). But I do not know if that is a
>> bad choice for some reason or other.
>
>I thought about Anonymous myself when I wrote my reply to your OP.  I
>refrained from mentioning it because it might have some unexpected side
>effect we're not aware about.

Let me try this with the Anonymous SID and see what happens. In the
meantime I am going to ping some contacts from my MS days to see if there
are indeed unintended consequences.

>Keep in mind that Interix only supported standard POSIX permission bits.
>Cygwin strives to support POSIX ACLs per POSIX 1003.1e draft 17.  That's
>a bit more extensive.

Yes, that is beginning to dawn on me now that I have taken a better look
at sec_acl.cc.

Bill

- Raw text -