X-Recipient:	archive-cygwin AT delorie DOT com
DKIM-Filter:	OpenDKIM Filter v2.11.0 sourceware.org 7198D3858418
DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com;
	s=default; t=1710977090;
	bh=FJTqi1KFXQae6IKSvRK4DP8Y2FhxyMC2aLEf+kd8v8I=;
	h=Date:Subject:To:References:In-Reply-To:List-Id:List-Unsubscribe:
	List-Archive:List-Post:List-Help:List-Subscribe:From:Reply-To:
	From;
	b=PdSC1yg851Hnz5RomD8SZolbdXZT2YLTKutXXCEvG5gx9YQT8OtKahbi+T53uAOvU
	/TrlultPGL3U+RfwO6ks5HHkb9TnpMSyDzlR2lT6xQrY0SoVfrxt6P9m0qRIrJePoW
	KaTUs/ieBMKSbeaiw0Io5F3KdRGne01VYrAyIlAM=
X-Original-To:	cygwin AT cygwin DOT com
Delivered-To:	cygwin AT cygwin DOT com
DMARC-Filter:	OpenDMARC Filter v1.4.2 sourceware.org F07983858C39
ARC-Filter:	OpenARC Filter v1.0.0 sourceware.org F07983858C39
ARC-Seal:	i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1710977042; cv=none;
	b=PuMWcYwA4sPx0xGsrMV9IlyQWr//AGUVmr4+Y5jTBBHc2wes0TcxclIpsWI8smLuqU6Q68zhZvo/QKPSrIXqfyTaxnb140R0XHKbJ+ptamNsqqGwHYQ6bssdnalEOGWhOW0p1yU9cEmPBMVmUSiDY3ecqsYq3TbrrKOdqsc4Y7o=
ARC-Message-Signature:	i=1; a=rsa-sha256; d=sourceware.org; s=key;
	t=1710977042; c=relaxed/simple;
	bh=UqQ0YYbURE65vW1qMq0vLGiW9NZsPV9pLRG0zxsFs5w=;
	h=DKIM-Signature:From:Message-ID:Date:MIME-Version:Subject:To;
	b=c6mp/WjSNxpM3fHPiTLVw/SV5dr0sA1f2jXkovlY2WaN8vFWGBtS01gwCpcF9z2dENHKLXL9rTpDzLcVrkLIp8h8Ri4jf9OSVXgqn8S0rF9NdoqNZFyhtvrg6/7TgjNbugMm1YuiEml+BAsmLAn9vPMsJfT/4qpN24BgLRE0Slo=
ARC-Authentication-Results:	i=1; server2.sourceware.org
X-Google-DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed;
	d=1e100.net; s=20230601; t=1710977038; x=1711581838;
	h=in-reply-to:content-language:references:to:subject:user-agent
	:mime-version:date:message-id:from:x-gm-message-state:from:to:cc
	:subject:date:message-id:reply-to;
	bh=iG77MestSL0/Pu5DqpR/L/yRJ1xOhWRL6lQkon27zIw=;
	b=JSgogllrXqbG8tK+TrMF36w961Gh/7E2jl74EEi+lr4uGlm1EgyFrDVaKpdtZHX+Be
	mCEyqUS7BMFbMb4COlNxysYCWY1cG7jFMBIF+QhdIB1/TnZ4YwfvAx0r1z+F3gd46dYO
	DfNpKj+yKBPD/NKC8k1n9GVatlQj4V65PJkAmRXWY4g+u5Q/qH0vn4Y5EXUVfdjJYddE
	57fM7LTjY3Z2C8c1QAJrtSc3p28MlCIPyhatH6AeVjT4DXoU/T47UrXA48GfvTMmovlu
	XJc+wdMStBa80HgHl5Pg18c6fF3z9wq7DHsIYFYbscrg7/kVlupj+sbYvXD8SlrScKeu
	MchQ==
X-Gm-Message-State:	AOJu0YzB1X0CwzCaR/H6eH4DDsWn4bMRjRiQXkIhVEhrjMUzIAUa7AwY
	tZZwZMdoulIo+OSvIMPNImj9UyUuY71mPpsRucnpHLy0gKzaeA3EyXICnE0=
X-Google-Smtp-Source:	AGHT+IHiYoEgqNSsfswly2VnjAD906fU2fjIetebGULqVmhSVimrjRwZHifaJaHe64bkjBY7snoVJw==
X-Received:	by 2002:a6b:4f17:0:b0:7cb:f1d0:a1cc with SMTP id
	d23-20020a6b4f17000000b007cbf1d0a1ccmr18455395iob.4.1710977038375;
	Wed, 20 Mar 2024 16:23:58 -0700 (PDT)
X-Google-Original-From:	"J. Terry Corbet" <Terry DOT Corbet AT GMail DOT com>
Message-ID:	<11b37ebb-a069-46d7-9fdf-806671d8b624@GMail.com>
Date:	Wed, 20 Mar 2024 17:23:39 -0600
MIME-Version:	1.0
User-Agent:	Mozilla Thunderbird
Subject:	Re: ACEs and ACLs
To:	Corinna Vinschen via Cygwin <cygwin AT cygwin DOT com>
References:	<9bec816c-66ea-49cb-baaa-47137fa2938f AT GMail DOT com>
	<ZfgaaDfqVvzOkUrq AT calimero DOT vinschen DOT de>
	<e13760eb-7908-44ee-8af7-162794388c5f AT GMail DOT com>
	<ZfhS9uSJMBCrbVoL AT calimero DOT vinschen DOT de>
In-Reply-To:	<ZfhS9uSJMBCrbVoL@calimero.vinschen.de>
X-Spam-Status:	No, score=-1.6 required=5.0 tests=BAYES_00, DKIM_SIGNED,
	DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, FREEMAIL_FROM, HTML_MESSAGE,
	RCVD_IN_DNSWL_NONE, SPF_HELO_NONE, SPF_PASS, TXREP,
	T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.6
X-Spam-Checker-Version:	SpamAssassin 3.4.6 (2021-04-09) on
	server2.sourceware.org
X-Content-Filtered-By:	Mailman/MimeDel 2.1.30
X-BeenThere:	cygwin AT cygwin DOT com
X-Mailman-Version:	2.1.30
List-Id:	General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Unsubscribe:	<https://cygwin.com/mailman/options/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=unsubscribe>
List-Archive:	<https://cygwin.com/pipermail/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe:	<https://cygwin.com/mailman/listinfo/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
From:	"J. Terry Corbet via Cygwin" <cygwin AT cygwin DOT com>
Reply-To:	"J. Terry Corbet" <terry DOT corbet AT gmail DOT com>
Errors-To:	cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com
Sender:	"Cygwin" <cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com>
X-MIME-Autoconverted:	from base64 to 8bit by delorie.com id 42KNOqNi1285351

This is a somewhat belated reply to your emails concerning my troubles 
with ACLs.  It is belated because the environment which I attempt to 
manage via a single administrative account looking at all mounted file 
systems as if they were local to whichever workstation I happen to be 
working from is rather large after several decades of evolution of 
hardware, bioses and operating systems and has taken me this much time 
to apply the recommended fstab setting and test against all the 
different source and target destinations.  [My environment is actually 
rather minuscule as compared to what many professional sys admins 
accomplish daily in using Cygwin in their corporate environments with 
hundreds of users, but pretty large for a private, home network.]

So, the primary purpose of this follow-up is to thank you for the 
'noacl' advice and to confirm that I am back to having the necessary 
controls.  Thank you.  But, while it is true that I have accomplished my 
task, in a low priority back-drop, if you have the time, I would 
appreciate being pointed to any documentation or tutorials that might 
help me understand the conundrum with which the experience leaves me.  
Namely:

Even with noacl specified, the result of modifying some simple text file 
-- either locally or remotely -- causes some perturbation in the 
resulting set and order of ACEs in the ACL for that file versus what is 
the result if I use some native, non-cygwin software to perform 
precisely the same modification -- again, either operating locally or 
remotely.

This lack of real understanding on my part could be looked at from these 
two questions that I have:

A.  If noacl is _not_ the default setting for a Cygwin install, it would 
seem that the existing handling of ACLs must meet most of the user 
community's needs.  For what sorts of networks and/or environments -- 
which must differ from mine as being comprised solely of Windows Mapped 
Network Drives having ntsf partitions -- does the fstab option of acl 
work better than noacl?

or, alternately

B.  Are the differences that can be observed in the resulting ACL state 
of a simple text file being 'touched' by a native Windows executable and 
a similar Cygwin executable only differences in style or syntactical 
preference but no actual difference in the suite of permissions 
available to both local and remotely authenticated users?  [I have been 
able to discern, for example, differences between explicit and inherited 
specifications, but there are also differences which derive, as it seems 
from the use of <perms> specified in what the icacls documentation page 
describes as "basic" as contrasted with "advanced" permissions.]

Thanks for whatever you can suggest on my non-critical, low-priority 
request for additional information.

On 2024-03-18 08:43, Corinna Vinschen via Cygwin wrote:
> On Mar 18 08:30, J. Terry Corbet via Cygwin wrote:
>> Thank you for the greatly needed assistance, but the reference to which you
>> have pointed me says that noacl will be ignored in the case of ntfs file
>> systems.
> No, it doesn't say that.  It says
>
>    "The flag is ignored on NFS filesystems."
>                            ^^^
>                          not NTFS
>
>> All of mine are and that has not changed, neither has the default
>> entry in fstab, which seems always to have been:
>>
>> none /cygdrive cygdrive binary, posix=0, user 0 0
> Well, the code in question hasn't changed for years either.
>
>
> ¯\_(ツ)_/¯
> Corinna
>

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

- Raw text -