X-Recipient:	archive-cygwin AT delorie DOT com
DKIM-Filter:	OpenDKIM Filter v2.11.0 sourceware.org 032FB385843D
DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com;
	s=default; t=1641384414;
	bh=ErulTxmTUDVz+CQveTAiX155sc2aGA0JSs4CTeC6/WQ=;
	h=Date:From:To:Subject:References:In-Reply-To:List-Id:
	List-Unsubscribe:List-Archive:List-Post:List-Help:List-Subscribe:
	Reply-To:From;
	b=qWfE3MHGmBq5UV6YloW1aBAFRZvAAsZ0ajiYItU38QaLOJZO0PNyaV+Fiy1cxNQmP
	hd9+AviCESn8p0c+19Sgu3WonNCx1iZBh7vG8BpgTALMgyFXds5dmmMSjLHIjcVnwR
	CalnnrlbLujBjpabtwHQrde+FdFlvv8BpPMfVYvs=
X-Original-To:	cygwin AT cygwin DOT com
Delivered-To:	cygwin AT cygwin DOT com
DMARC-Filter:	OpenDMARC Filter v1.4.1 sourceware.org 70311385842C
Authentication-Results:	sourceware.org;
	dmarc=fail (p=none dis=none) header.from=cygwin.com
Authentication-Results:	sourceware.org; spf=fail smtp.mailfrom=cygwin.com
Date:	Wed, 5 Jan 2022 12:34:22 +0100
From:	Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To:	cygwin AT cygwin DOT com
Subject:	Re: Duplicate ACLs? - Can't copy file even with Admin permissions
Message-ID:	<YdWCPsZOModGdRXM@calimero.vinschen.de>
Mail-Followup-To:	cygwin AT cygwin DOT com, cygwin AT kosowsky DOT org
References:	<25043 DOT 7019 DOT 643488 DOT 389876 AT consult DOT pretender>
MIME-Version:	1.0
In-Reply-To:	<25043.7019.643488.389876@consult.pretender>
X-Provags-ID:	V03:K1:T9RcnAbJq3oRvjKA/mMGMv2n7MRquNOx+dk4AJIH78g9Y7yBMiI
	sn6SHM/V5+uKkPvo5qLT4liuAFc2bMEDCqBZMiKRakk/FoBOsw2RHvvFb3JnEs811pjgBNT
	ibdko0qUZJKoyDV/BzNCFQGCpJzEEG0MqtHyRQLfYaJLRpwGaS74c3cHRn0DcVfJPqvm2gB
	MhHetsgc5tCmKDQXCFxCg==
X-UI-Out-Filterresults:	notjunk:1;V03:K0:SbCvVB4XmL4=:0+QDoREoPchN4+bHENMcu/
	hOlq3YsdH9bAZK+DfLF92OrskM1BsRAB9Uet7hX6rOgFv6eGq1c1vnS9dDtepK/ZJ6FjsMY/k
	jCk7O8IqupIvVfUEe8Ss7YF/PMsSvL1QYsDTxDCG9+r1j3BbTfGKQDSGhNyLyDxBwuA2r/VIi
	8qv8p/hsP2ocbvJZWqe/MzyhNN/mWn4NUWKiu6ZiChnZlvmMjZAMU+u5XjQ+UQ1eFIzgJ/b7Z
	zlYsrCPbWfgjqf96+o4QO4j6izxyZ2ltuO54nxpxf15TaJ6q/m0/uXWxE1fIM/JcoQJzMFjUT
	vp16/6deoMh28BsQcmYSDtQ5zk9ViiVOfdaSQNcOydAgaIdiKN1SWXWOgbeaZ26vpwKk3ISAZ
	h86jIxUp1M/XDBHB5VtAcMh0U7Z3edEph/tXMxKLqzDETP5+Papp5dvIpNVE8INi91x/gIepV
	CrdPDQI7opSBIolWbseWQ4u24h4bk4umaaAOxSL+8ZiZAK+dQyBbxM3aVOYYG4Tmjgl5xmviO
	PsJTvNlRAApOFsAdWuUTH83GVZ1Eocull5mRzn36FA2/iTuvWMTN2mUso8ZchePfPO2UGby0c
	dlXJRXlwKGkLUM0AhRRngtLOcsH1RWIYQYyAuA2fy6ojMbQ0B6ynwkX2xw4hSvDqWtEZpJJBp
	2XtdJ22TIG7VNNUGlXIrBy9S8HidtGRLYalxPaDQw7x15GC/JY7f96J1Rpw9aB7TToeAo0mF4
	vaj8AqvbPIW887M6
X-Spam-Status:	No, score=-79.2 required=5.0 tests=BAYES_00,
	GOOD_FROM_CORINNA_CYGWIN, KAM_DMARC_NONE, KAM_DMARC_STATUS, RCVD_IN_DNSWL_NONE,
	RCVD_IN_MSPIKE_H4, RCVD_IN_MSPIKE_WL, SPF_FAIL, SPF_HELO_NONE,
	TXREP autolearn=ham autolearn_force=no version=3.4.4
X-Spam-Checker-Version:	SpamAssassin 3.4.4 (2020-01-24) on
	server2.sourceware.org
X-BeenThere:	cygwin AT cygwin DOT com
X-Mailman-Version:	2.1.29
List-Id:	General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Unsubscribe:	<https://cygwin.com/mailman/options/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=unsubscribe>
List-Archive:	<https://cygwin.com/pipermail/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe:	<https://cygwin.com/mailman/listinfo/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
Reply-To:	cygwin AT cygwin DOT com
Errors-To:	cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com
Sender:	"Cygwin" <cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com>

On Jan  3 10:51, cygwin AT kosowsky DOT org wrote:
> I have a file: /c/Config.Msi/3da9e136.rbf that I cannot copy, even when
> [...]
> 	# getfacl 3da9e136.rbf
> 	# file: 3da9e136.rbf
> 	# owner: Administrators
> 	# group: SYSTEM
> 	user::rwx
> 	group::rwx
> 	other::r-x
> 	user::rwx
> 	group::rwx
> 	group:SYSTEM:rwx
> 	mask::rwx
> 	other::r-x
> [...]
> Note that 'subinacl' shows:
> =================================
> +File C:\Config.Msi\3da9e136.rbf
> =================================
> /control=0x0
> /owner             =builtin\administrators
> /primary group     =system
> /audit ace count   =0
> /perm. ace count   =3
> /pace =system  Type=0x0 Flags=0x3 AccessMask=0x1f01ff
> /pace =everyone  Type=0x0 Flags=0x3 AccessMask=0x1200a9
> /pace =builtin\administrators  Type=0x0 Flags=0x3 AccessMask=0x1f01ff

I don't see a reliable, trustable source for downloading subinacl, so
let's do this with builtin tools.

I'm not sure what's going on on your machine.  I tried to reproduce your
issue by creating a file with the exact same DACL:

  $ cat aclfile.sav
  acltest
  D:P(A;;FA;;;SY)(A;;0x1200a9;;;WD)(A;;FA;;;BA)

Note that the file is in UTF-16, the first two bytes are the BOM.

  $ icacls . /restore aclfile.sav
  processed file: .\acltest
  Successfully processed 1 files; Failed processing 0 files
  $ icacls acltest
  acltest NT AUTHORITY\SYSTEM:(F)
	  Everyone:(RX)
	  BUILTIN\Administrators:(F)

  Successfully processed 1 files; Failed processing 0 files
  $ getfacl acltest
  # file: acltest
  # owner: Administrators
  # group: SYSTEM
  user::rwx
  group::rwx
  other::r-x

Would you mind to run `icacls 3da9e136.rbf /save 3da9e136.acl
and paste the content of 3da9e136.acl into your reply?

Please use "reply-to" to keep mail threading intact.  Your two
mails in terms of this problem are disconnected for some reason.


Thanks,
Corinna

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

- Raw text -