X-Recipient:	archive-cygwin AT delorie DOT com
X-Original-To:	cygwin AT cygwin DOT com
Delivered-To:	cygwin AT cygwin DOT com
DMARC-Filter:	OpenDMARC Filter v1.4.1 sourceware.org 996BE3858D28
Authentication-Results:	sourceware.org;
	dmarc=none (p=none dis=none) header.from=kosowsky.org
Authentication-Results:	sourceware.org; spf=pass smtp.mailfrom=kosowsky.org
X-CMAE-Analysis:	v=2.4 cv=KPyfsHJo c=1 sm=1 tr=0 ts=61d8a8e7
	a=BYuR5sdBHlGgEYWvfiqr5Q==:117 a=BYuR5sdBHlGgEYWvfiqr5Q==:17
	a=kj9zAlcOel0A:10 a=DghFqjY3_ZEA:10 a=Y4wjOHm_AAAA:8 a=lJeV3vzo1mRhNFpRCvEA:9
	a=CjuIK1q_8ugA:10 a=vUyUeBe4x1l68iL-zyVZ:22
X-SECURESERVER-ACCT:	inbox AT kosowsky DOT org
X-Spam-Checker-Version:	SpamAssassin 3.4.4 (2020-01-24) on
	server2.sourceware.org
X-Spam-Status:	No, score=-3.2 required=5.0 tests=BAYES_00, FROM_BLANK_NAME,
	KAM_DMARC_STATUS, NICE_REPLY_A, RCVD_IN_DNSWL_NONE, RCVD_IN_MSPIKE_H2,
	SPF_HELO_NONE, SPF_PASS, TXREP autolearn=ham autolearn_force=no version=3.4.4
X-Spam-Level:
MIME-Version:	1.0
Message-ID:	<25048.43238.484068.737126@consult.pretender>
Date:	Fri, 7 Jan 2022 15:56:06 -0500
To:	cygwin AT cygwin DOT com
In-Reply-To:	<8735m12k3u.fsf@Rainer.invalid>
Subject:	Re: Duplicate ACLs? - Can't copy file even with Admin permissions
In-Reply-To:	<25047.23325.33020.646017@consult.pretender>
References:	<25043 DOT 7019 DOT 643488 DOT 389876 AT consult DOT pretender>
	<YdWCPsZOModGdRXM AT calimero DOT vinschen DOT de>
	<8735m12k3u DOT fsf AT Rainer DOT invalid>
	<25047 DOT 23325 DOT 33020 DOT 646017 AT consult DOT pretender>
X-Mailer:	VM 8.2.0b under 25.2.2 (x86_64-pc-linux-gnu)
From:	"" <cygwin AT kosowsky DOT org>
X-Virus-Scanned:	ClamAV using ClamSMTP
X-CMAE-Envelope:	MS4xfGEP1bPLlKlxaHUxrd/64HiC1QPHthbk9n8zXkaQuB6/VDnB3eMuc7oUqh3EIT2mkAickXwjmM5gTXrkk6VUktq389ekiTD11MIhUUURIi+iF3zx/jvH
	573gcFla3LLhbWGzCjriNCcbykXSiAokjOiiJ+hDztMhcxLuX5m7lChaAO11KuW94y2T+zayT8RSrZE0g0VgSgPbpbOKR7s5ZBo=
X-BeenThere:	cygwin AT cygwin DOT com
X-Mailman-Version:	2.1.29
List-Id:	General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Unsubscribe:	<https://cygwin.com/mailman/options/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=unsubscribe>
List-Archive:	<https://cygwin.com/pipermail/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe:	<https://cygwin.com/mailman/listinfo/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
Errors-To:	cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com
Sender:	"Cygwin" <cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com>

> Corinna Vinschen wrote:
> On Jan  6 16:11, cyg DOT  DOT  DOT  AT kosowsky DOT org wrote:
> It is.  I realized belatedly, that 3da9e136.acl is apparently a
> directory, not a file.

It's actually a file...
     # ls -al 3da9e136.rbf
     -rwxrwxr-x+ 1 Administrators SYSTEM 96728 Jul  8  2018 3da9e136.rbf*

     #file 3da9e136.rbf
     3da9e136.acl: data
     3da9e136.rbf: PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Window

Notice:
    # icacls.exe  3da9e136.rbf
    3da9e136.rbf NT AUTHORITY\SYSTEM:(OI)(CI)(F)
                 Everyone:(OI)(CI)(RX)
		 BUILTIN\Administrators:(OI)(CI)(F)

    Successfully processed 1 files; Failed processing 0 files

But:
    #icacls 3da9e136.rbf /save 3da9e136.acl
    processed file: 3da9e136.rbf
    Successfully processed 1 files; Failed processing 0 files

    #cat 3da9e136.acl
    3da9e136.rbf
    D:P(A;OICI;FA;;;SY)(A;OICI;0x1200a9;;;WD)(A;OICI;FA;;;BA)


> So I tweaked my local test accordingly, and
> here's my session output:
> 
>   $ mkdir acltest
>     $ chown Administrators.SYSTEM acltest
>       $ cat aclfile.sav
>         acltest
> 	  D:P(A;OICI;FA;;;SY)(A;OICI;0x1200a9;;;WD)(A;OICI;FA;;;BA)
> 	    $ icacls . /restore aclfile.sav
> 	      processed file: .\acltest
> 	        Successfully processed 1 files; Failed processing 0
>     files
>       $ icacls acltest
>         acltest NT AUTHORITY\SYSTEM:(OI)(CI)(F)
> 	          Everyone:(OI)(CI)(RX)
> 		            BUILTIN\Administrators:(OI)(CI)(F)
> 
>   Successfully processed 1 files; Failed processing 0 files
> 
> >   #icacls 3da9e136.rbf
> >   3da9e136.rbf NT AUTHORITY\SYSTEM:(OI)(CI)(F)
> >              Everyone:(OI)(CI)(RX)
> >              BUILTIN\Administrators:(OI)(CI)(F)
> >
> >   Successfully processed 1 files; Failed processing 0 files
> 
> So the DACL is now identical to yours.  Let's try getfacl:
> 
>   $ getfacl --version | head -1
>     getfacl (cygwin) 3.3.3
>       $ getfacl acltest
>         # file: acltest
> 	  # owner: Administrators
> 	    # group: SYSTEM
> 	      user::rwx
> 	        group::rwx
> 		  other::r-x
> 		    default:user::rwx
> 		      default:group::rwx
> 		        default:group:SYSTEM:rwx
> 			  default:mask::rwx
> 			    default:other::r-x
> 
> Ok, that looks correct.  Now compare with the output of your getfacl:
> 
> >   #getfacl 3da9e136.rbf
> >   # file: 3da9e136.rbf
> >   # owner: Administrators
> >   # group: SYSTEM
> >   user::rwx
> >   group::rwx
> >   other::r-x
> >   user::rwx
> >   group::rwx
> >   group:SYSTEM:rwx
> >   mask::rwx
> >   other::r-x
> 
> It's exactly the same as the one my gefacl prints above, except the
> "default:" specifier for default ACEs is missing in the output.

Could that because yours is a directory and mine is a file

> I can't explain that, sorry.  Old getfacl version?  Running an output
> filter of some sort?  Clutching at straws here....

  #getfacl --version | head -1
  getfacl (cygwin) 3.3.3


-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

- Raw text -