X-Recipient:	archive-cygwin AT delorie DOT com
DKIM-Filter:	OpenDKIM Filter v2.11.0 sourceware.org B5BA7385E00B
DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com;
	s=default; t=1585276909;
	bh=hdlfixWPtJr+OhQz6xIqepQkjTGK+cxJBBZHp/k77Sw=;
	h=Date:Subject:To:List-Id:List-Unsubscribe:List-Archive:List-Post:
	List-Help:List-Subscribe:From:Reply-To:From;
	b=cpVP5OoTAHyVeQdsiDRLVSLBGwrR7oBFHmNnNY3t6rewQvFmN9LpvO6uZaYMsVCgb
	GJcEqM4Oi7h2QHpWYuw+zBzLSLjPwFwaFfUdakACrSt1clFLySyAqzRAI8rKYl1rUk
	Emm/17GxZhx5t4sn4fPxREHv0D1bLhKRnTCwA+yY=
X-Original-To:	cygwin AT cygwin DOT com
Delivered-To:	cygwin AT cygwin DOT com
DMARC-Filter:	OpenDMARC Filter v1.3.2 sourceware.org 34D0F385E006
X-Google-DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed;
	d=1e100.net; s=20161025;
	h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
	bh=dqCNx3DfU9xc3mQWfEE2jAMo4ztxZVXFlkN1Da1ASmo=;
	b=dmZJjXUJlIHGaO859a+lZM8DI8V7GKq1nO/8P4Tg5u9JFFHH0djd9NI/jjPs4DlROH
	CLeChSxikE7oaFgov7tbCzkGc5fXXoeBgiJLuE+sv9z4QCPqpTH4vlpBQL9I8EEfwS8s
	pq1z6dRAjaytsy/HXTFnRfJMFTKHxR370vESTavBl+tmyJJUreSME6t67TggC0gq2+DZ
	GRZyY+S2IdI3SWH+AO8oFZfjLg6BWxLVmlbNHZ8z/tiVKybqhIgHmZr4Eca/HBQZwFEX
	vts1aF5x7JEW7RwZJJdsXHVWcKKx+YctjnoKxZTBqK529gs1JvvpIFEr1j0YkmA9/aZM
	gIqw==
X-Gm-Message-State:	ANhLgQ14g7k33DE6gz49tUoVVXAcu3BWad6SoWLoZMszbqM8LnAnMz1/
	kl90neExhwp3weVXF/p6xzfMMABij1ezCt709dycSsaZ
X-Google-Smtp-Source:	APiQypLJxz05uYDFfdW3TEnh5DwCfYunML7TNJ7uKIZSzdygjzV8xlXkOL4oTYfADNMGleysRB0GGwEJHcO4tTdLTNM=
X-Received:	by 2002:a2e:9013:: with SMTP id h19mr7075370ljg.101.1585276905562;
	Thu, 26 Mar 2020 19:41:45 -0700 (PDT)
MIME-Version:	1.0
Date:	Fri, 27 Mar 2020 03:41:35 +0100
Message-ID:	<CABPLASQZ+g7juLdwd_z=GEqdtga2AcS4P6_E8P4SKDas0+KiwQ@mail.gmail.com>
Subject:	ACL: Why SYSTEM doesn't have full access set on newly created files?
To:	cygwin AT cygwin DOT com
X-Spam-Status:	No, score=-2.7 required=5.0 tests=BAYES_00, DKIM_SIGNED,
	DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, FREEMAIL_ENVFROM_END_DIGIT,
	FREEMAIL_FROM, HTML_MESSAGE, RCVD_IN_DNSWL_NONE, SPF_HELO_NONE, SPF_PASS,
	TXREP autolearn=ham autolearn_force=no version=3.4.2
X-Spam-Checker-Version:	SpamAssassin 3.4.2 (2018-09-13) on
	server2.sourceware.org
X-Content-Filtered-By:	Mailman/MimeDel 2.1.29
X-BeenThere:	cygwin AT cygwin DOT com
X-Mailman-Version:	2.1.29
List-Id:	General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Archive:	<http://cygwin.com/pipermail/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe:	<http://cygwin.com/mailman/listinfo/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
From:	Kacper Michajlow via Cygwin <cygwin AT cygwin DOT com>
Reply-To:	Kacper Michajlow <kasper93 AT gmail DOT com>
Sender:	"Cygwin" <cygwin-bounces AT cygwin DOT com>

Hi,

I know that Cygwin tries to emulate UNIX permissions using ACL. But I don't
understand why SYSTEM doesn't have Full Control allowed or even modify.
Shouldn't generally SYSTEM have access to everything?

I have cloned git repository of UWP application, and deployment fails in VS
with error:
"DEP0700: Registration of the app failed. [0x80070005] Deployment Register
operation with target volume F: on Package ... from:  (AppxManifest.xml)
 failed with error 0x80070005."
It is easily fixable by adding Full Control for SYSTEM on all files, but
that wasn't my first idea, so it took some time :) Long story short, it
fails and might be not obvious for the user why, at the first glance.

Also when accessing ACL from Explorer it throws:
"The permissions on <directory> are incorrectly ordered, which may cause
some entries to be ineffective."
And forces me to reorder them if I want to edit.

That said, I have three questions:
1. Could Cygwin by default give SYSTEM full control? If not, why?
2. Could Cygwin put ACL in order, so Windows doesn't complain about it?
3. Do we need "NULL SID" entry?

-Kacper
--
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

- Raw text -