Subject: Re: default ACLs
From: Mikel Ward <mward@aconex.com>
To: cygwin@cygwin.com
In-Reply-To: <20091023152726.GB5369@calimero.vinschen.de>
References: <1256255127.2713.41.camel@mward-laptop.ops.acx> 	 <20091023152726.GB5369@calimero.vinschen.de>
Content-Type: text/plain
Date: Sat, 24 Oct 2009 10:21:15 +1100
Message-Id: <1256340075.2582.39.camel@mward-laptop>
Mime-Version: 1.0
Content-Transfer-Encoding: 7bit
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Precedence: bulk
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com

Corinna wrote:
> Neither the NtCreateFile function, nor the
> CreateFile function handle ACE inheritance either. 

Looks like that's only if lpSecurityAttributes is non-NULL, but I guess
Cygwin uses that field?

"Windows Server 2003 and Windows XP/2000:  For backward compatibility
purposes, CreateFile does not apply inheritance rules when you specify a
security descriptor in lpSecurityAttributes. To support inheritance,
functions that later query the security descriptor of this file may
heuristically determine and report that inheritance is in effect. For
more information, see Automatic Propagation of Inheritable ACEs."

Out of interest I'm going to have a look at SECURITY_DESCRIPTORs, but
it'll take some time. :-)

> Thanks for the report
Thanks for taking a look!


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple