X-Recipient:	archive-cygwin AT delorie DOT com
DKIM-Filter:	OpenDKIM Filter v2.11.0 sourceware.org 669F8385803D
DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com;
	s=default; t=1641561780;
	bh=lWQGR+nO2W2vW1rX1zu2VARyZd27z+Hk3fhetzvN9Jg=;
	h=Date:From:To:Subject:References:In-Reply-To:List-Id:
	List-Unsubscribe:List-Archive:List-Post:List-Help:List-Subscribe:
	Reply-To:From;
	b=ZCFig21LndC9bDRK4JQ+h4In38MQzEBo+yjRq39BYTwT3bBirIFvAY+9VbMmj4wkP
	M+0S5Nud0aQvt+MkaDr6BCEIeasSzIr2s1kuN4ArzdTUJgQWPXFCmojmgO7cI9V/RZ
	QIZ21F4iaDnvTChcBcfBZF8hZ8PrchSwYirxvxWg=
X-Original-To:	cygwin AT cygwin DOT com
Delivered-To:	cygwin AT cygwin DOT com
DMARC-Filter:	OpenDMARC Filter v1.4.1 sourceware.org 3FF47385802B
Authentication-Results:	sourceware.org;
	dmarc=fail (p=none dis=none) header.from=cygwin.com
Authentication-Results:	sourceware.org; spf=fail smtp.mailfrom=cygwin.com
Date:	Fri, 7 Jan 2022 14:22:25 +0100
From:	Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To:	cygwin AT cygwin DOT com
Subject:	Re: Duplicate ACLs? - Can't copy file even with Admin permissions
Message-ID:	<Ydg+kfpACU9PPx5t@calimero.vinschen.de>
Mail-Followup-To:	cygwin AT cygwin DOT com, cygwin AT kosowsky DOT org
References:	<25043 DOT 7019 DOT 643488 DOT 389876 AT consult DOT pretender>
	<YdWCPsZOModGdRXM AT calimero DOT vinschen DOT de>
	<8735m12k3u DOT fsf AT Rainer DOT invalid>
	<25047 DOT 23325 DOT 33020 DOT 646017 AT consult DOT pretender>
MIME-Version:	1.0
In-Reply-To:	<25047.23325.33020.646017@consult.pretender>
X-Provags-ID:	V03:K1:oIBB4S6ULPRrBT4+ZO61koBFeFIY3HdVn3fiTbOID4ABWCqP8Oo
	2wxqZ2Z8pNUnTkErsd17f1dC1+q4cZ7DtZymCCSeoixC5iWC4qpvbU+S3fPNZTy/Fhp8ATX
	QUNVyBbHmj7KdVjyghfg938N6De1y484N/cazMCsj0RhApQCBcgEd5JhjiwaVyaRN+IUBXD
	aY0sCYqB5efDCKIeb6AWw==
X-UI-Out-Filterresults:	notjunk:1;V03:K0:Z/GJq6KVgH4=:juDR+rVK2lglpHQYPd3nBg
	kt3JA/9LD66jSotXwsjrwOnIVF+soMWk/Xa9w9jne3f5xAJGj9i6Ajk4AtuR6pdegBrCZLmYT
	ABdkEZ2c3jF5Eye9E4lMtbSmCf6C0RSMhbBCev/u2ZXcQd1MerHcTaj/AOzz8Y+McxBw8KVXm
	/X8Lj1UgIkgZL15ruwhpeh0M/WDSsIA9J0xEITmP/VypUBwcNlz8HzAMlNobKZgswnX6EnjkB
	sop+73KD9sQHxQil+dNBUO2LXl1tr9gXGDxS17xRErmji+WbQUBA3g5fQU3WnuzYgL+iHnmTE
	qSGMUWCyjgcT91C4kZ7QDyh9wl2TkeSy49d9ENydLzE0tjmQpVjDq4eyi3FVV81Rm+OwEDx1i
	L8tSQxJrvZWTINMYi0D20a6Sx2imvA/tdPivU57DFShXA2tD9ix7Hl15mXi606GtHtuLxRFuj
	iqmqRFHkwMsF5OYUuHgrbpZ8Am2cQVqQyfTzurjn0fGCDRPDkkYHZ6b+GEFjv5eRaECtZ92kn
	6o8ylu0z9tiT/97FPvVxINRMKOGIGCCR66kQXPo7h1NOU/7rCs+mPSb/TJ7ODNDTB5Mi5BN73
	a1mPG3T3Zdb/SmMpjmEhZ920W8s+xuLXDX/9APdDnbuz4D3PvddxOqC1UVoIdAneNZxUSmDOv
	fdLZQ69abtH/1Ct214vnpGw1VnNAOqXVlEC6gu3fm0ICUdUugugGct4U7MMBfBZsOWMXvmk5c
	hPnNBG5vNoXyMgxT
X-Spam-Status:	No, score=-84.3 required=5.0 tests=BAYES_00,
	GOOD_FROM_CORINNA_CYGWIN, KAM_DMARC_NONE, KAM_DMARC_STATUS, RCVD_IN_DNSWL_NONE,
	RCVD_IN_MSPIKE_H4, RCVD_IN_MSPIKE_WL, SPF_FAIL, SPF_HELO_NONE,
	TXREP autolearn=ham autolearn_force=no version=3.4.4
X-Spam-Checker-Version:	SpamAssassin 3.4.4 (2020-01-24) on
	server2.sourceware.org
X-BeenThere:	cygwin AT cygwin DOT com
X-Mailman-Version:	2.1.29
List-Id:	General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Unsubscribe:	<https://cygwin.com/mailman/options/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=unsubscribe>
List-Archive:	<https://cygwin.com/pipermail/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe:	<https://cygwin.com/mailman/listinfo/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
Reply-To:	cygwin AT cygwin DOT com
Errors-To:	cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com
Sender:	"Cygwin" <cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com>

On Jan  6 16:11, cygwin AT kosowsky DOT org wrote:
> Corinna Vinschen wrote:
> > On Jan  3 10:51, cyg DOT  DOT  DOT  AT kosowsky DOT org wrote:
> > > I have a file: /c/Config.Msi/3da9e136.rbf that I cannot copy, even when
> > > [...]
> > >       # getfacl 3da9e136.rbf
> > >       # file: 3da9e136.rbf
> > >       # owner: Administrators
> > >       # group: SYSTEM
> > >       user::rwx
> > >       group::rwx
> > >       other::r-x
> > >       user::rwx
> > >       group::rwx
> > >       group:SYSTEM:rwx
> > >       mask::rwx
> > >       other::r-x
> > > [...]
> > [...]
> > Would you mind to run `icacls 3da9e136.rbf /save 3da9e136.acl
> > and paste the content of 3da9e136.acl into your reply?
> 
> I ran the code you suggested:
>   #icacls 3da9e136.rbf /save 3da9e136.acl
>   processed file: 3da9e136.rbf
>   Successfully processed 1 files; Failed processing 0 files
> 
>   #cat 3da9e136.acl
>   3da9e136.rbf
>   D:P(A;OICI;FA;;;SY)(A;OICI;0x1200a9;;;WD)(A;OICI;FA;;;BA)
> 
> Not sure how to interpret the above but hope it's helpful...

It is.  I realized belatedly, that 3da9e136.acl is apparently a
directory, not a file.  So I tweaked my local test accordingly, and
here's my session output:

  $ mkdir acltest
  $ chown Administrators.SYSTEM acltest
  $ cat aclfile.sav
  acltest
  D:P(A;OICI;FA;;;SY)(A;OICI;0x1200a9;;;WD)(A;OICI;FA;;;BA)
  $ icacls . /restore aclfile.sav
  processed file: .\acltest
  Successfully processed 1 files; Failed processing 0 files
  $ icacls acltest
  acltest NT AUTHORITY\SYSTEM:(OI)(CI)(F)
          Everyone:(OI)(CI)(RX)
          BUILTIN\Administrators:(OI)(CI)(F)

  Successfully processed 1 files; Failed processing 0 files

>   #icacls 3da9e136.rbf
>   3da9e136.rbf NT AUTHORITY\SYSTEM:(OI)(CI)(F)
>              Everyone:(OI)(CI)(RX)
>              BUILTIN\Administrators:(OI)(CI)(F)
> 
>   Successfully processed 1 files; Failed processing 0 files

So the DACL is now identical to yours.  Let's try getfacl:

  $ getfacl --version | head -1
  getfacl (cygwin) 3.3.3
  $ getfacl acltest
  # file: acltest
  # owner: Administrators
  # group: SYSTEM
  user::rwx
  group::rwx
  other::r-x
  default:user::rwx
  default:group::rwx
  default:group:SYSTEM:rwx
  default:mask::rwx
  default:other::r-x

Ok, that looks correct.  Now compare with the output of your getfacl:

>   #getfacl 3da9e136.rbf
>   # file: 3da9e136.rbf
>   # owner: Administrators
>   # group: SYSTEM
>   user::rwx
>   group::rwx
>   other::r-x
>   user::rwx
>   group::rwx
>   group:SYSTEM:rwx
>   mask::rwx
>   other::r-x

It's exactly the same as the one my gefacl prints above, except the
"default:" specifier for default ACEs is missing in the output.

I can't explain that, sorry.  Old getfacl version?  Running an output
filter of some sort?  Clutching at straws here....

> > Please use "reply-to" to keep mail threading intact.  Your two
> > mails in terms of this problem are disconnected for some reason.
> 
> Not sure why my MTA has not been threading properly but for some
> reason I didn't receive your response either.

By default I'm using "list-reply-to" in mutt, so replies are only
going to the mailing list.  I added you to the CC for this reply.

> Hopefully this gets attached to the correct thread.

It did, thanks.


Corinna

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

- Raw text -