delorie.com/archives/browse.cgi   search  
Mail Archives: cygwin/2018/08/04/16:06:22

X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
:list-unsubscribe:list-subscribe:list-archive:list-post
:list-help:sender:subject:to:references:from:message-id:date
:mime-version:in-reply-to:content-type
:content-transfer-encoding; q=dns; s=default; b=iJXGPCxBRHJ85Fm2
ZrRO3Z3l2dA4Ik35zHxgGZsm8vmlZW5av5urfrtoAQjzqXwirsDns2mPr3PZM+to
7IC/dUIeSsKxbHNNMF9X+04UJU0xjeP9GnaNfwrQuBtBzOOnxQ5zgRYabiDU5lvr
PCmBwMFQXDAD03vuA5t2YMg3E8E=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
:list-unsubscribe:list-subscribe:list-archive:list-post
:list-help:sender:subject:to:references:from:message-id:date
:mime-version:in-reply-to:content-type
:content-transfer-encoding; s=default; bh=RwP0l03a3/hSd977HCH+++
WrKH4=; b=FvXqfrZ0HDP8edx4vALEjJswdyNdJOBNMuCBYoYHW9Pm23TNAjB9+L
WKkTpBK5vI5I/BwaW00YT4Yyrj+z3GqN8MmozZDUyFCvmWiRPOOFNBB3x0UhHlmm
DflNuDDoh5dBamdasioDfpzLUggMghuLfWnR7ovUfgik5ef026H2A=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Spam-SWARE-Status: No, score=1.8 required=5.0 tests=BAYES_50,FOREIGN_BODY,FREEMAIL_FROM,GIT_PATCH_2,RCVD_IN_DNSWL_NONE,SPF_PASS autolearn=no version=3.3.2 spammy=wurde, avast, Avast, UD:aspx
X-HELO: mail-wm0-f42.google.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-transfer-encoding; bh=3dGlIxtvCvGfFCGPIrLoNMmq2EJjA4LPE2I5IKUXifw=; b=qMzv6Xm1ejXrNYxC/uHt4qZTIBjZJb8OZftEk/zH9wXnD89fs+2Rvzs6X3bTpt1f1s kAh+9088zavsJNVODpyENtzWmiR/LnNNIUpIrHcUSFIr0IdJkSvGeGT+1HUrQX778wlf uAzzjgBhnAuCqAcD3OjyAut8oXLc5f0QA2Vn4NXzEqS5y4mtDBZ9+iqi9bX68s3WPEd2 1Qn2F5VUjHoRkbLNNPdgw/1u+nwy4+xtM0rqSusTB7T/+YHc/I9iwBGmOv+ZTLnF+BlW R/iESeEcsbYTwKylzD0DPEag2GMZTAvjpeHDTo+kzK4/SQ67UiglTnhRx4qX8b5mlHLt NktA==
Subject: Re: Cygwin's ACL handling is NOT interoperable with Windows
To: cygwin AT cygwin DOT com
References: <2B3187EFB48B477183C355EDF9660136 AT W340>
From: Marco Atzeri <marco DOT atzeri AT gmail DOT com>
Message-ID: <6429baa8-6f37-7591-e5a4-9a5a2a0f9644@gmail.com>
Date: Sat, 4 Aug 2018 22:06:06 +0200
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1
MIME-Version: 1.0
In-Reply-To: <2B3187EFB48B477183C355EDF9660136@W340>
X-IsSubscribed: yes
X-MIME-Autoconverted: from quoted-printable to 8bit by delorie.com id w74K6K4j024219

Am 04.08.2018 um 19:11 schrieb Stefan Kanthak:
> Hi,

Hi Stefan,

>
> <https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-files> states:
>
> | There's just one problem when trying to map the POSIX permission model
> | onto the Windows permission model.
> ...
> | Canonical ACLs are unable to reflect each possible combination of POSIX
> | permissions.
> ...
> | Again: This works on all supported versions of Windows. Only the GUIs
> | aren't able (or willing) to deal with that order.
>
> These last two statements are wrong:
>
> * the first statement holds ONLY because of the LIMITATION of the POSIX
>    permissions; it is WRONG for the general case, which ALL Windows
>    interfaces/components need to consider and handle, EVERYWHERE!

Cygwin aims to POSIX compliance, using the tool given by Windows.
Have you tested all the possible POSIX permissions and verified that
it is possible to replicate with windows ACL ?
Please note that ACL were not created by Microsoft.

> * the second statement is a blatant lie: to guarantee CORRECT
>    interpretation of arbitrary ACLs, ALL Windows interfaces/components,
>    not just the "GUIs", MUST create CANONICAL ACLs only.

That is your opinion.
About the "lie", may I suggest you an old Italian classic

"Galateo of Manners & Behaviours by Giovanni Della Casa"
http://www.gutenberg.org/ebooks/47993


>    This especially means that not just Windows Explorer, but also the
>    command processor with its builtin COPY command as well as the
>    CopyFile() <https://msdn.microsoft.com/en-us/library/aa220078.aspx>
>    API (just to pick 3 examples) bring INHERITED ACEs into their PROPER
>    canonical order.
>
> As Cygwin is a guest in the house of Windows, it should respect its hosts
> house rules; instead it but violates them, and blames the host for its
> faults!

What is your problem ?

If you don't like how cygwin is behaving, you can:

- stop to use it
- propose a change (with a patch of course)
- learn to use it without venting

> Fix Cygwin's BUGGY ACL creation!

Cool down. You paid nothing, we own you nothing.

No one here is paid to solve your "theorical" problem;
if you know a better way to handle the POSIX permissions
show us the code and we can discuss.

> regards
> Stefan Kanthak

Best Regards
Marco

---
Diese E-Mail wurde von Avast Antivirus-Software auf Viren geprüft.
https://www.avast.com/antivirus


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple


- Raw text -


  webmaster     delorie software   privacy  
  Copyright © 2019   by DJ Delorie     Updated Jul 2019