X-Recipient:	archive-cygwin AT delorie DOT com
DKIM-Filter:	OpenDKIM Filter v2.11.0 sourceware.org 0A4C43892035
DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com;
	s=default; t=1641809348;
	bh=3gX3caOva6wNU1L72phthFwv4J30avW0f/08ckRQF8w=;
	h=Date:From:To:Subject:References:In-Reply-To:List-Id:
	List-Unsubscribe:List-Archive:List-Post:List-Help:List-Subscribe:
	Reply-To:From;
	b=c5Z8DGetbkKiB79k4brr/l8dAJU3B9Cl0Eijw0UIuPfAJLWLpcL6jrYrc91JULygW
	aAD1N74dYy1jVElh5/+E0q6gNsRS7zpjzsrWHXBdRkk5KKzF0KeAA69C5eYYm+XShP
	1l+ptTPUQSQetFf6zDzzx5N+HpXF6PRFwuNVXGOE=
X-Original-To:	cygwin AT cygwin DOT com
Delivered-To:	cygwin AT cygwin DOT com
DMARC-Filter:	OpenDMARC Filter v1.4.1 sourceware.org 0CCBC389202A
Authentication-Results:	sourceware.org;
	dmarc=fail (p=none dis=none) header.from=cygwin.com
Authentication-Results:	sourceware.org; spf=fail smtp.mailfrom=cygwin.com
Date:	Mon, 10 Jan 2022 11:07:47 +0100
From:	Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To:	cygwin AT cygwin DOT com
Subject:	Re: Duplicate ACLs? - Can't copy file even with Admin permissions
Message-ID:	<YdwFc2JA5FfH1Ktr@calimero.vinschen.de>
Mail-Followup-To:	cygwin AT cygwin DOT com, cygwin AT kosowsky DOT org
References:	<25043 DOT 7019 DOT 643488 DOT 389876 AT consult DOT pretender>
	<YdWCPsZOModGdRXM AT calimero DOT vinschen DOT de>
	<8735m12k3u DOT fsf AT Rainer DOT invalid>
	<25047 DOT 23325 DOT 33020 DOT 646017 AT consult DOT pretender>
	<25048 DOT 43238 DOT 484068 DOT 737126 AT consult DOT pretender>
MIME-Version:	1.0
In-Reply-To:	<25048.43238.484068.737126@consult.pretender>
X-Provags-ID:	V03:K1:YWC/Ai/+OTu1GJIUrHNfYvzzJf9l2G+F0D7M1KL80Ssl20o4LEz
	bIuBlAEwK8h/OzOLkkbaO/aQuHXbPTQVPn9UgsKMJix0XK8pgbpZnma+jKnqxCGm1+EDlaf
	YD8NaoXULDXvUTE/qHejlm7AXIB2SkGIR9sE9WMI9kJ+6UNASukvEY2F1XJaxqJRAfE83Wj
	x4RPDh/umpo6k9WQxU2rw==
X-UI-Out-Filterresults:	notjunk:1;V03:K0:X0jbLxdgfQU=:GDf5qENHF0kWpp1tiA8UuW
	PL9qurFSigeePQzintf9izZ7VsqB5Kt3i1nVRHOhgEept5cGfxKZEbwieKNw7ROqgA0vURb04
	bC6GHZ2rb0UVORQJQFjY3asLBnlaS6XUwFPz0SGPdx1WyGGTfCUbG538HpvVY+S7VFWSqTlnn
	wXipwiY12tw5wvA168MVJIVOrFJQbbGYU54D2jAJGWP0yRNjmi5TTM9d1Qi7OFKQWcunbb3bL
	7z9C5QXj8kGknNHvllaOfUmaKMVdryLMTTOdHIo3CkAhxuQFIXJ6TYlfPODJMXackRN52kH3Y
	gJsPz2fuX0B3CamANa1iuO1rvQKzjOq9zqJi0+Bd2kEWTh0WnY2IbTxiL+bkAMRJ9e5RXY5WI
	xtr1PbIMmkmbkCDAmdx6sfus6y3LOmX5ucAzdQS4+JKpIuNyylMzZlNg5FBNUKKbG76nRF1du
	AAgc+wOs5Q0napRpKVommRSezSIoMV4XiZw9Do5mXZbhNB6w9S2xmXI8C0wYmATX/WuJnfgC8
	dKRtwtn9x4TDMfE3EhqnI9X8FVY/mjtmTNOI1cu+WHCuUz+b4qOW6dvMbbBIFk/yng4UEnH+Q
	c3mEMmDcKjxiXGDk8OTMeq0aBVMTbeQWACFq3n1Qgj+38qg4wXxYpGs9HNKFpswowLv87BP5T
	ukmSw521AbhnC/PCHhBll/vroAybpm0NTmNu+1STPH1dqFTkJcrFQkdnVhBGgfOkpZg0hu/UU
	o7pgA8IJetId4T9nE+gOOI6C5ISf+cIusJNg8Tk4uujqiLWqRs865DELy8VmXVXg5I2uv0ITk
	XzuD9H8oe19QWDAUFZAQCPdSN8DdOS8wJkr3gLhzXRLFxnvBjvyEI7PnVZEkqR8BzpiPGCApE
	6F5xgsBakK8k83D+qq1IQFuDUUL0KwtT5kVl97qageENVaqT1gRXVXxJBJGUE5dsnbJM0bOQ6
	5uRfmg5PkJPXZ2Auh5sdBIASUo8eJ6/W4AN7lwCwwkDGrZe41vtDfMOjwcgUhVaMiCneqeNm2
	lmAVaQSX/DA5weV8omip8Jo=
X-Spam-Status:	No, score=-90.1 required=5.0 tests=BAYES_00,
	GOOD_FROM_CORINNA_CYGWIN, KAM_DMARC_NONE, KAM_DMARC_STATUS, RCVD_IN_DNSWL_NONE,
	SPF_FAIL, SPF_HELO_NONE, TXREP autolearn=ham autolearn_force=no version=3.4.4
X-Spam-Checker-Version:	SpamAssassin 3.4.4 (2020-01-24) on
	server2.sourceware.org
X-BeenThere:	cygwin AT cygwin DOT com
X-Mailman-Version:	2.1.29
List-Id:	General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Unsubscribe:	<https://cygwin.com/mailman/options/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=unsubscribe>
List-Archive:	<https://cygwin.com/pipermail/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe:	<https://cygwin.com/mailman/listinfo/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
Reply-To:	cygwin AT cygwin DOT com
Errors-To:	cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com
Sender:	"Cygwin" <cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com>

On Jan  7 15:56, cygwin AT kosowsky DOT org wrote:
> > Corinna Vinschen wrote:
> > On Jan  6 16:11, cyg DOT  DOT  DOT  AT kosowsky DOT org wrote:
> > It is.  I realized belatedly, that 3da9e136.acl is apparently a
> > directory, not a file.
> 
> It's actually a file...

This is weird.  The meaning of the OI and CI markers are "Object
inheritance" and "Container inheritance".  These bits only make sense
for directories and they control how ACEs are inherited by child objects
(files) and child containers (subdirs).

Consequentially, if I use `icacls /restore' on a file with the DACL
saved by you, the OI and CI bits are simply ignored.  After /restore,
if I call /save again the resulting file looks like this:

  $ cat aclfile-after-restore.sav
  acltest
  D:PAI(A;;FA;;;SY)(A;;0x1200a9;;;WD)(A;;FA;;;BA)

However, this gave me a clue.  If this is really a file, it's a good
chance that the inheritance flags are restricted to directories at
one point in either the Cygwin DLL itself, or the getfacl tool.

I'll have a look into the sources later, but I sure would prefer if
I could create such a file locally.


Thanks,
Corinna

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

- Raw text -