X-Recipient:	archive-cygwin AT delorie DOT com
X-Original-To:	cygwin AT cygwin DOT com
Delivered-To:	cygwin AT cygwin DOT com
DMARC-Filter:	OpenDMARC Filter v1.4.1 sourceware.org 12E1A3858D1E
Authentication-Results:	sourceware.org;
	dmarc=pass (p=none dis=none) header.from=gmail.com
Authentication-Results:	sourceware.org; spf=pass smtp.mailfrom=gmail.com
DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112;
	h=message-id:date:mime-version:user-agent:subject:content-language:to
	:references:from:in-reply-to:content-transfer-encoding;
	bh=IwiN/zAygkd23D0mruJle/6wAjwhQJ27kWgAA2PsPCQ=;
	b=dm5shWRRO+e0Lw1+YgfyiCvq+TWg099ylTNGcjNLrwtaZlzc+6rh1CYI1C/bKg4TGw
	/lcUDsbMBdbcxTVnl4hfTv0XMaNCf3zm22mJQfdRlBzai5q4mQzCCnoPZEVXff57h/YI
	Jl9+jMIqvHIFeTkVr2zo6C2+rq5Z2KCl+2lCTHPi2m8IRadub9Z4hXeWxhfEi02rZM2a
	yFJhuQM/pffPXtQxAQhgyp/vQsmAUebd/enimUUhPJFhmrdN44nG2nv3jdQX+pvY/uoa
	HxiDRKVaehbFhIkWGc7TYCIXHJPdhzruSeYoPlPCLCXq2rNclQ5KCcAEVGfwMC0UekXo
	61Yg==
X-Google-DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed;
	d=1e100.net; s=20210112;
	h=x-gm-message-state:message-id:date:mime-version:user-agent:subject
	:content-language:to:references:from:in-reply-to
	:content-transfer-encoding;
	bh=IwiN/zAygkd23D0mruJle/6wAjwhQJ27kWgAA2PsPCQ=;
	b=XmEIhseP4vHRrZF1OVTlUDNk0tMiI/RuxABl9bcvVmkhJ9EDGxzeTYN0yA+Ny9+mnm
	IX3QL/7CMrJ9BJKNbqTbs9gkWvgdydkyX96yzwfCp2o7J2bcfd8+Rrlhd1i0+1nFaDwu
	jmfMPmHyvzh/0X0SRcB9HO2LDINzmBu4YvNE4cx0og17gbvpbyGu8d7BaGGUuA5Nkxgi
	eXj+fAJ8lvgxRwB9izjCcMeJBFfOneCqrCOf0Gig2ZGfoygbpiL4eDBxSMF4dJ5nqlne
	tji6KJW24qlV/eAVOI7emzwn7W5ocCuOpdko9pKjwugKTR7/AZzwXQTEJylGjP4Gmqy5
	OB8g==
X-Gm-Message-State:	AOAM531ncHBRzugV5GpZEkn+JcBjxHeN2AiILRuv8Vrw/6qOqbCq4F8+
	LYWIu5sdLrEutCQj1ZVKCgGlEYqP/PI=
X-Google-Smtp-Source:	ABdhPJwirNandInOOG8nz5iLMjdRJWHiD6tCKK3pi+GXINky5mAPsieUzB63Vlpoe2l0B4YCGNkcfw==
X-Received:	by 2002:a17:907:c15:: with SMTP id
	ga21mr7625386ejc.356.1644521960052;
	Thu, 10 Feb 2022 11:39:20 -0800 (PST)
Message-ID:	<1bc0c300-e262-725f-96d2-aaba5259fa27@gmail.com>
Date:	Thu, 10 Feb 2022 20:39:18 +0100
MIME-Version:	1.0
User-Agent:	Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101
	Thunderbird/91.5.1
Subject:	Re: Permissions on Files Created with Cygwin
To:	cygwin AT cygwin DOT com
References:	<48dbaee7-17f9-4652-2f45-c31980b0de2b AT cantab DOT net>
From:	Marco Atzeri <marco DOT atzeri AT gmail DOT com>
In-Reply-To:	<48dbaee7-17f9-4652-2f45-c31980b0de2b@cantab.net>
X-Spam-Status:	No, score=-1.5 required=5.0 tests=BAYES_00, DKIM_SIGNED,
	DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, FREEMAIL_FROM, NICE_REPLY_A,
	RCVD_IN_DNSWL_NONE, SPF_HELO_NONE, SPF_PASS, TXREP,
	T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.4
X-Spam-Checker-Version:	SpamAssassin 3.4.4 (2020-01-24) on
	server2.sourceware.org
X-BeenThere:	cygwin AT cygwin DOT com
X-Mailman-Version:	2.1.29
List-Id:	General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Unsubscribe:	<https://cygwin.com/mailman/options/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=unsubscribe>
List-Archive:	<https://cygwin.com/pipermail/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe:	<https://cygwin.com/mailman/listinfo/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
Errors-To:	cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com
Sender:	"Cygwin" <cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com>
X-MIME-Autoconverted:	from base64 to 8bit by delorie.com id 21AJdxSX009479

On 10.02.2022 17:48, Rob Stevens wrote:
> Whenever I create files with cygwin (using whatever utilitity or editor)
> I get these permissions as reported by icacls:
>    NULL SID:(DENY)(Rc,S,X,DC)
>    MALIN\rob:(R,W,D,WDAC,WO)
>    NT AUTHORITY\SYSTEM:(DENY)(S,X)
>    BUILTIN\Administrators:(DENY)(S,X)
>    MALIN\None:(R)
>    NT AUTHORITY\SYSTEM:(RX,W)
>    BUILTIN\Administrators:(RX,W)
>    Everyone:(R)
> These permissions are not those inherited from the containing directory.
> Not that only, but the windows utilities complain the the
> permissions are mal-ordered.
> 
> Is this not a bug?? Do I need a different (null?) umask in the environment?
> 

do not change the order

https://cygwin.com/cygwin-ug-net/ntsec.html

see under "File permissions"

The order of ACEs is important. The system reads them in sequence until 
either any single requested permission is denied or all requested 
permissions are granted. Reading stops when this condition is met. Later 
ACEs are not taken into account.

Unfortunately, the security tab in the file properties dialog of the 
Windows Explorer will pop up a warning stating "The permissions on ... 
are incorrectly ordered, which may cause some entries to be 
ineffective." Pressing the Cancel button of the properties dialog 
fortunately leaves the sort order unchanged, but pressing OK will cause 
Explorer to canonicalize the order of the ACEs, thereby invalidating 
POSIX compatibility.


-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

- Raw text -