DMARC-Filter:	OpenDMARC Filter v1.4.2 delorie.com 568IIQrw1416810
Authentication-Results:	delorie.com; dmarc=pass (p=none dis=none) header.from=cygwin.com
Authentication-Results:	delorie.com; spf=pass smtp.mailfrom=cygwin.com
DKIM-Filter:	OpenDKIM Filter v2.11.0 delorie.com 568IIQrw1416810
Authentication-Results:	delorie.com;
	dkim=pass (1024-bit key, unprotected) header.d=cygwin.com header.i=@cygwin.com header.a=rsa-sha256 header.s=default header.b=J+H1HTBX
X-Recipient:	archive-cygwin AT delorie DOT com
DKIM-Filter:	OpenDKIM Filter v2.11.0 sourceware.org 9F560385021D
DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com;
	s=default; t=1751998704;
	bh=i/EdzSN99fahFumloVoe0xmDXxwhCdbu42hJ4SnzHZI=;
	h=References:In-Reply-To:Date:Subject:To:List-Id:List-Unsubscribe:
	List-Archive:List-Post:List-Help:List-Subscribe:From:Reply-To:
	From;
	b=J+H1HTBX1cdx7daLUEc9VXAo34HFyFIaqNDyljl2/Fr82AZzl1wrg5VQ1fr1DM0dc
	1aAFkdLo23h8N4bd6BSbtx+sg1/LZoi/vfnC6bvA7a2PBys3JGk4/ka4ne1uzZFu8U
	nD1tvBrgOEYMsAmxNMD7Fr0PUxJvQyIQiA328Wxw=
X-Original-To:	cygwin AT cygwin DOT com
Delivered-To:	cygwin AT cygwin DOT com
DMARC-Filter:	OpenDMARC Filter v1.4.2 sourceware.org D96323850C7D
ARC-Filter:	OpenARC Filter v1.0.0 sourceware.org D96323850C7D
ARC-Seal:	i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1751998651; cv=none;
	b=q1PPhlfcXo+bOLKH9fv3C8MyUz+Ig392Yf50SooaZNKWyi0cXAqFmi/v/R7cDmZ1N/sxIJeGLuMIvjoDowXYp/evuB8Fd3jfChGWYOJSVC9Kg+hswAGZ1QeA23FeWecHlQ40vsSdVQOk8gMrJzVCFbKA+GZ7DuoNeegXXG4/yDE=
ARC-Message-Signature:	i=1; a=rsa-sha256; d=sourceware.org; s=key;
	t=1751998651; c=relaxed/simple;
	bh=46ESvQH+PY+jxdlcUjIFxmZGfNwUPr8sfg1wczNPHls=;
	h=DKIM-Signature:MIME-Version:From:Date:Message-ID:Subject:To;
	b=sZCZCjDCyITanbomMcKPqDY80u6SmNK/8PPWgQzS6crNjPmO3BzQIwEJjI3cOzmg4CPqIdZ/eIPNLWAZjmyaSK8uARmZ6gCBLA7uAkkz4rKQlI8s01EYt9vu6Ofbr+lqHqTMG8A6OhrO/IkXux5mc1RcCEsiWF6XrNe/Ea2jT0c=
ARC-Authentication-Results:	i=1; server2.sourceware.org
DKIM-Filter:	OpenDKIM Filter v2.11.0 sourceware.org D96323850C7D
X-Google-DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed;
	d=1e100.net; s=20230601; t=1751998649; x=1752603449;
	h=to:subject:message-id:date:from:in-reply-to:references:mime-version
	:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
	bh=uBx9mlAopp4rzbnLnM7vjeoPUqNF3Ir8Fegai51YYvc=;
	b=gvAv1v7Za9BGFkFyQxkTFc0WGq68RX9M+TCCnT5iksr8Wk4tgxf2Z0U7WKQyvV3w16
	KrGzEmZdcME4CmqsI3sQtkC5l8KvySuM83m7kmB4uywZo9Kz6SfuDeIFjrQaSIFkusK2
	Y5D/IFO5K60tTF1My6FATI5Iw2FbDX6uLdCCP6nx6cXzjJS+bmHMz0Qh8+f+TBzuoPEE
	q3SXhaSSYCNqWNwErJbrG0VU40SZyocR5qCNRemaCJ1W6gGbwANkiDLpIudzTP53HqX4
	glCZM7EH0l//fRXFLcjh2TN84BxZm+1z65rrdrb4ErSVbKaVuNmw+9l9EGRvJsIToTSF
	fv8Q==
X-Forwarded-Encrypted:	i=1;
	AJvYcCWQwxpW9M0hjH7S3QsAz+EbF5mUgNJ2HyWYWrzho46b8NT97u6C2RxKRENqCscSfMe098Vd1HEUnVQlpneJQhXciw==@cygwin.com
X-Gm-Message-State:	AOJu0YwUztF4emcttcMC6XnKP1ab7wOhBzT03vhhu6Samn69GCN4Ue/G
	AiZh0+zTMmUhVNJyxg76GAV+tjcP+6NeadKMcm8uU/9Pr+KF3tEhVX8tSlQTbf46ZMUvZOVgjlG
	YJuOP1ebkEp5gEsXbMlj5Pc/NxXgXTrep0Uk6V/S9Dw==
X-Gm-Gg:	ASbGncuLWlswgDX/A9AX17avbX0ftRVdeX01KxpHiChy1/ELcfj0+CvmIk+3SS9b3Gv
	7pLB0tDoMkCikOiNvDFK1yB/pskgp4PX/pVnyWANiSQv+5DWq/MbkRta47quSdhlNTotDOOXUI4
	4qQrxtk6ZRMSreL7rbgbmAwYGYkfftmkgk43HShdUw0pg=
X-Google-Smtp-Source:	AGHT+IEjVA/2p5N3Ge664hrl8X5wLedkw2JBMhW5sl2tvalcKPDJoDOBldiHWfA9qnCeSSXuqMlbpIV3IOGGo7lzsMM=
X-Received:	by 2002:a17:907:3e9f:b0:ae3:635c:53c1 with SMTP id
	a640c23a62f3a-ae6c95141a0mr7222966b.54.1751998648421; Tue, 08 Jul 2025
	11:17:28 -0700 (PDT)
MIME-Version:	1.0
References:	<CAPJSo4UgWSL9U0XPZaLF24tAu_pJ-SjF_hjAgcg8d5epQMW4sw AT mail DOT gmail DOT com>
In-Reply-To:	<CAPJSo4UgWSL9U0XPZaLF24tAu_pJ-SjF_hjAgcg8d5epQMW4sw@mail.gmail.com>
Date:	Tue, 8 Jul 2025 20:16:51 +0200
X-Gm-Features:	Ac12FXwhAUXI92xHEKJxeKW9t_3HANyaHE8SxlOI0B3-y5RhLMKT1d2Vcsi-mss
Message-ID:	<CAPJSo4UZ2=7m8CtWsxmUQQx=GYSNUydMWYYyakxoHFov1QY5=Q@mail.gmail.com>
Subject:	Fwd: setfacl -m g:None:rwx nfstmp1 not working for dirs in Cygwin
	3.6.3 Re: /usr/bin/setfacl is broken in 3.7.0-0.127.g2029784e05d9
To:	cygwin AT cygwin DOT com, cygwin-developers AT cygwin DOT com
X-BeenThere:	cygwin AT cygwin DOT com
X-Mailman-Version:	2.1.30
List-Id:	General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Archive:	<https://cygwin.com/pipermail/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe:	<https://cygwin.com/mailman/listinfo/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
From:	Lionel Cons via Cygwin <cygwin AT cygwin DOT com>
Reply-To:	Lionel Cons <lionelcons1972 AT gmail DOT com>
Sender:	"Cygwin" <cygwin-bounces~archive-cygwin=delorie DOT com AT cygwin DOT com>

---------- Forwarded message ---------
From: Lionel Cons <lionelcons1972 AT gmail DOT com>
Date: Mon, 7 Jul 2025 at 09:46
Subject: setfacl -m g:None:rwx nfstmp1 not working for dirs in Cygwin
3.6.3 Re: /usr/bin/setfacl is broken in 3.7.0-0.127.g2029784e05d9
To: <cygwin AT cygwin DOT com>, Corinna Vinschen <corinna-cygwin AT cygwin DOT com>


On Thu, 19 Jun 2025 at 10:54, Lionel Cons <lionelcons1972 AT gmail DOT com> wrote:
>
> On Mon, 16 Jun 2025 at 22:57, Brian Inglis via Cygwin <cygwin AT cygwin DOT com> wrote:
> >
> > On 2025-06-16 03:17, Lionel Cons via Cygwin wrote:
> > > On Fri, 13 Jun 2025 at 21:52, Brian Inglis via Cygwin <cygwin AT cygwin DOT com> wrote:
> > >>
> > >> On 2025-06-13 06:09, Lionel Cons via Cygwin wrote:
> > >>> /usr/bin/setfacl is broken in 3.7.0-0.127.g2029784e05d9
> > >>>
> > >>> my testcase:
> > >>> lionel$ uname -a
> > >>> CYGWIN_NT-10.0-19045 halcyonrenard17 3.7.0-0.127.g2029784e05d9.x86_64
> > >>> 2025-06-10 12:15 UTC x86_64 Cygwin
> > >>> lionel$ mkdir nfstmp1
> > >>> ionel$ setfacl -m g::rwx nfstmp1
> > >>> setfacl: Permission denied
> > >>> ionel$ setfacl -m g:None:rwx nfstmp1
> > >>> setfacl: Permission denied
> > >>>
> > >>> This was working in Cygwin 3.5
> > >>
> > >> No changes have been made to the utility for five years,
> > >
> > > Are you sure? Isn't this tool part of coreutils?
> >
> > $ cygcheck -f /usr/bin/{g,s}etfacl
> > cygwin-3.6.1-1
> > cygwin-3.6.1-1
> >
> > Apparently mainly based on:
> >
> >         https://man.freebsd.org/cgi/man.cgi?query=setfacl&sektion=1
> >
> >         http://www.trustedbsd.org/acls.html
> >
> > also Linux uses:
> >
> >         https://man7.org/linux/man-pages/man1/setfacl.1.html
> >
> >         http://savannah.nongnu.org/projects/acl
> >
> >         http://savannah.nongnu.org/bugs/?group=acl
> >
> >         "ACL File Utilities"
> >
> > as we have had discussions about man pages missing from the man-pages-linux
> > packages and sources for alternates we could provide, and whether that would be
> > desirable and adequate.
> >
> > >> but a lot of changes
> > >> have been made to the DLL since 3.5.
> > >>
> > >> Could you please install current stable cygwin 3.6.3, retest and report,
> > >
> > > lionel$ uname -a
> > > CYGWIN_NT-10.0-19045 halcyonrenard17 3.6.3-1.x86_64 2025-06-05 11:45
> > > UTC x86_64 Cygwin
> > > lionel$ setfacl --version
> > > setfacl (cygwin) 3.6.3
> > > POSIX ACL modification utility
> > > Copyright (C) 2000 - 2025 Cygwin Authors
> > > This is free software; see the source for copying conditions.  There is NO
> > > warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
> > >
> > > ## testing with a file:
> > > lionel$ rm -f myfile && touch myfile && setfacl -m g::rwx myfile
> > > # works
> > >
> > > ## testing with a dir:
> > > lionel$ rm -Rf mydir && mkdir mydir && setfacl -m g::rwx mydir
> > > setfacl: Permission denied
> > >
> > > So in Cygwin 3.6.3 setfacl for files works, but not for dirs
> >
> > Thanks for doing that.
> >
> > One thing we have to watch for is to ensure that DACLs (Default ACLs) are set on
> > directories so files and subdirectories are accessible, for example:
> >
> >         dacl=d:u::rwx,d:g::r-x,d:o::r-x
> >         ...
> >         setfacl -m$dacl $dir
> >
> > although you would normally also set regular ACLs at the same time to be sure.
> >
> > So your directory ACLs depend on its parent's DACLs, but there is still an issue
> > there.
> >
> > I too get:
> >
> >         $ setfacl -m g::rwx test
> >         setfacl: Permission denied
> >
> > but:
> >
> >         $ chmod -c g+rwx test           # works
> >         mode of 'test' changed from 0755 (rwxr-xr-x) to 0775 (rwxrwxr-x)
> >         $ setfacl -m g::rwx test        # works but changes nothing
> > >> to try
> > >> and narrow down the issue occurrence to changes in major version 3.6 or 3.7, or
> > >> better to minor versions if you have the space and time?
> > >
> > > How can I install each Cygwin minor version (not just the Cygwin
> > > *.dll, I mean EVERYTHING including dependencies)?
> >
> > Maybe just cygwin (DLL and utilities) package 3.5.7 and 3.6.0 if you have time?
>
> Cygwin 3.3 /usr/bin/setfacl.exe works with both dirs and files. Cygwin
> 3.5.7 I can only test when I am back in my office next week :(
>
> @Corinna Vinschen Could you have a look at this issue, please?

This is still broken in Cygwin 3.6.3, and blocks the update to that version:

$ cd "$PWD" # plain NTFS filesystem
$ uname -a
CYGWIN_NT-10.0-19045 halcyonrenard17 3.6.3-1.x86_64 2025-06-05 11:45
UTC x86_64 Cygwin
$ mkdir nfstmp1
$ setfacl -m g:None:rwx nfstmp1
setfacl: Permission denied

"None" can be replaced with any local or domain group

Lionel


-- 
Lionel

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

- Raw text -