X-Recipient: archive-cygwin@delorie.com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=wyciQutql/DMKmlGjpIbQMo5IOmquiiDKx94hPUVlGHAR9jyUk2HJ
	sfodAP1BVPuvGvqB5+vatvw9XJ7HniyrEWBJuHw898KKvf/2KPkWpAatsuEiTrih
	RlzcOYezl0llVIwwaDqN3c4Jvi1DXzYV0D52EgG9sbciLS9LwT+qwM=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	 bh=GnnJFrP4Caxj3zI8WUzHBP7/1oA=; b=q4hphwBKrjotLam2ACt2Knp3AFMj
	8w0Mc+tD/Nuy7OUHOU6fVigighq8vLMSSbWPZcYcwY7pBw9piFMyBsAs3GaQ/3fT
	E1fjQeGBdXSeaqSx1X4YRc2r7S3KN+H1zpzytahmp4Rk2MOIM1HOYhu6mSKdZUAN
	4UTWR3ujJUkNEYM=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe@cygwin.com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin@cygwin.com>
List-Help: <mailto:cygwin-help@cygwin.com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
Delivered-To: mailing list cygwin@cygwin.com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-5.9 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=3.3.2
X-HELO: calimero.vinschen.de
Date: Fri, 29 Aug 2014 13:09:38 +0200
From: Corinna Vinschen <corinna-cygwin@cygwin.com>
To: cygwin@cygwin.com
Subject: Re: (call-process ...) hangs in emacs
Message-ID: <20140829110938.GD20700@calimero.vinschen.de>
Reply-To: cygwin@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
References: <87wq9v9j2y.fsf@Rainer.invalid> <53FD0662.5050208@cornell.edu> <20140827084245.GD20700@calimero.vinschen.de> <53FDD4A8.5050401@cornell.edu> <loom.20140827T170804-533@post.gmane.org> <loom.20140828T085927-71@post.gmane.org> <20140828095524.GO20700@calimero.vinschen.de> <20140828131832.GT20700@calimero.vinschen.de> <loom.20140828T172529-396@post.gmane.org> <loom.20140829T115632-276@post.gmane.org>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;	protocol="application/pgp-signature"; boundary="p1zSJVlfBL7BTggM"
Content-Disposition: inline
In-Reply-To: <loom.20140829T115632-276@post.gmane.org>
User-Agent: Mutt/1.5.23 (2014-03-12)

--p1zSJVlfBL7BTggM
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Aug 29 09:58, Achim Gratz wrote:
> Achim Gratz <Stromeko <at> NexGo.DE> writes:
> > > Please test.
> >=20
> > This fixes the "read-only" problem in Emacs (so that hunch was correct)=
.=20
> > Perl still doesn't play, but I think the 5.18 version should get it cor=
rect.
> > Will need to switch a test installation over for that, though.
>=20
> With that snapshot in place, ssh suddenly recognized that my private key
> file was more readable than it liked it to be, so it looks that it's using
> the same general strategy of dealing with ACL as Emacs.

...which means, they don't deal with ACLs at all.  They only see what's
given in the st_mode permission bits.  With this change, the group
permission bits now show that *somebody* has certain permissions on the
file, thus the group permissions indicate a too open access for ssh, if
somebody except you have write access to the file.

Downside: If you use inherited Windows permissions, you'll often have
the case that Administrators and/or SYSTEM have full access to your
files.  This in turn shows up as rwx group permissions now.  If you
can't change the permissions (company requirements, etc) the ssh key
file permission test will get annoying.

So it's probably a very nice change (thanks a lot for bringing this up!),
but it will probably have some negative side-effects for existing
installations.

> I'm starting to
> like this patch very much... :-)

Despite of what I'm outlining above, me too :)


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--p1zSJVlfBL7BTggM
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=hjZQ
-----END PGP SIGNATURE-----

--p1zSJVlfBL7BTggM--
