delorie.com/archives/browse.cgi   search  
Mail Archives: cygwin/2024/04/07/19:06:30

X-Recipient: archive-cygwin AT delorie DOT com
DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 5B98838460BD
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com;
s=default; t=1712304310;
bh=jDj47OfXdIvkawv0hi7xEP4msXxt2Mchcx/yYSoK950=;
h=Subject:To:Date:List-Id:List-Unsubscribe:List-Archive:List-Post:
List-Help:List-Subscribe:From:Reply-To:From;
b=gxQEFixXksufi0SiSa3O4LpfWtc/wB4RfHLDJMxlcnomAX9tDLaqnEjIo7hagDRgl
Jozo5BbDxQMl5CRnjIC0HojL/0QeUr5neBkb2RR6iG2Q449fkepNBC9CMjWtfVor+b
Be0WjfbgqLjvDHbbXoUV5Z8eAAgHjaGUjlmg3Fr8=
X-Original-To: cygwin AT cygwin DOT com
Delivered-To: cygwin AT cygwin DOT com
DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 700273858C32
ARC-Filter: OpenARC Filter v1.0.0 sourceware.org 700273858C32
ARC-Seal: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1712304286; cv=none;
b=rl1q/46q0CDqNSQJG9ZUEB02u+rQ3pQyEBdczSjwkGE1PT+dywxWsQmmImTxuxza5h5RxkZAInRjT2gJVEiePd4arZE+Y2Y4dAkJ05RdyQB+IXf0HlgU6h/JtqI1BZUX9biDQP3KeICxFgXG80kJrGSjYf7EyQkmOfS1GmEBehk=
ARC-Message-Signature: i=1; a=rsa-sha256; d=sourceware.org; s=key;
t=1712304286; c=relaxed/simple;
bh=sa/E9m7PYvmBSU6Pb4D6/GdCpXL04IbkJswmj87DYFc=;
h=DKIM-Signature:Message-ID:Subject:From:To:Date:MIME-Version;
b=WHAPUcb8gixwZK9J18qG7TWUyCHN3GoBBfUYoUnXwKgBoqeKc7ggnY0anDlBCiU+pXkB03GMd75tdzMVbDNCfQJWtSiEm83yQ+DrUuHWwACexu3J+cYdcY4NHm1m6HjEXwRIWSvuWhiZeCQhnYzqfg4EmtD9mCJFG/NPe1Ty7gE=
ARC-Authentication-Results: i=1; server2.sourceware.org
X-UI-Sender-Class: 724b4f7f-cbec-4199-ad4e-598c01a50d3a
Message-ID: <947bc8610a34164e8047dec9ba13cf21e24686c1.camel@gmx.li>
Subject: endless loop with junction points
To: cygwin AT cygwin DOT com
Date: Fri, 05 Apr 2024 10:04:42 +0200
User-Agent: Evolution 3.38.3-1+deb11u2
MIME-Version: 1.0
X-Provags-ID: V03:K1:d3TLxi/R/gR69gomh/JRVCOZsaCiKkjJmJKg7m8rStasTxR5Qyh
EdTx52ilvkICD4gaVtsI3tdK6uISIbC9+9CpjQHkqHLxVKGuzI1cSwMFKl5BIAki5P9HSw9
idw0bZr5XzdpHEifoAKioim9lu4ZwLd/nNk7C56EFegaYxTFNP3L6zg+EtxjBCu7XDuMt8V
+6os02aTdcH1Wso9ZcTgg==
UI-OutboundReport: notjunk:1;M01:P0:sjfQLJvpIW0=;rIbafciv7n5QyPLn/kxNWhPfeHS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X-Spam-Status: No, score=-2.8 required=5.0 tests=BAYES_00, DKIM_SIGNED,
DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, FREEMAIL_FROM, RCVD_IN_DNSWL_LOW,
RCVD_IN_MSPIKE_H2, SPF_HELO_NONE, SPF_PASS,
TXREP autolearn=ham autolearn_force=no version=3.4.6
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on
server2.sourceware.org
X-BeenThere: cygwin AT cygwin DOT com
X-Mailman-Version: 2.1.30
List-Id: General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Archive: <https://cygwin.com/pipermail/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe: <https://cygwin.com/mailman/listinfo/cygwin>,
<mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
From: Matthias--- via Cygwin <cygwin AT cygwin DOT com>
Reply-To: "Matthias AT gmx DOT li" <matthias DOT meyer AT gmx DOT li>
Sender: "Cygwin" <cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com>

I try to save ACLs during a ssh session to my windows client with an ${priv_user} with following
access rights:
   editrights -a SeAssignPrimaryTokenPrivilege -u ${priv_user}
   editrights -a SeCreateTokenPrivilege -u ${priv_user}
   editrights -a SeTcbPrivilege -u ${priv_user}
   editrights -a SeDenyRemoteInteractiveLogonRight -u ${priv_user}
   editrights -a SeServiceLogonRight -u ${priv_user}

In the ssh terminal I run:
   icacls "C:\Users\*" /save C:\obsAttrib\ACLinfo /T /C /L /Q

Unfortunately it doesn't work because icacls follows junctions points in an endless loop. e.g.:
   C:\Users\All Users\Application Data\Application Data\Application Data\Application
   Data\Application Data\Application Data\Application Data\Application Data\Application
   Data\Application Data\Application Data\Adobe\ARM\Reader_15.010.20060\meyer\ReaderDCManifest.msi:
   The system cannot find the path specified


If I run the same command from an CMD Terminal (as administrator) it work. icacls don't follow the
junctions. icacls report "Access is denied" for all junction points.

In opposite - if I run ls -R "/cygdrive/C/Users/Application Data" it also don't follow the junction
point.

Any hint how to execute icacls?

Thanks in advance
Matthias


-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

- Raw text -


  webmaster     delorie software   privacy  
  Copyright © 2019   by DJ Delorie     Updated Jul 2019