DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:from:to:subject:references:date:in-reply-to
	:message-id:mime-version:content-type; q=dns; s=default; b=cVmOc
	wldongGmKS109mL/NV8ftV7JxxqK8YGXkWZwDKkYXlnsGrVKzQerkGtJev+L8fDF
	ARWxFJEDPYN4bupVwdRR99ouBRHnI7WsyitLsBz4Q01iPC08Tw4JpMMPkh+gom3p
	9/x7Ep+9SwRK9Uyzyx9DILO/+bZV8IJcaK2NZo=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
From: Achim Gratz <Stromeko@nexgo.de>
To: cygwin@cygwin.com
Subject: Re: (call-process ...) hangs in emacs
References: <20140828095524.GO20700@calimero.vinschen.de>	<20140828131832.GT20700@calimero.vinschen.de>	<loom.20140828T172529-396@post.gmane.org>	<loom.20140829T115632-276@post.gmane.org>	<20140901115701.GD2644@calimero.vinschen.de>	<87ppffs0kw.fsf@Rainer.invalid>	<20140902083217.GM2644@calimero.vinschen.de>	<87mwaiq6bt.fsf@Rainer.invalid>	<20140902191914.GG6056@calimero.vinschen.de>	<87sik9q069.fsf@Rainer.invalid>	<20140902200907.GA18235@calimero.vinschen.de>
Date: Tue, 02 Sep 2014 22:23:24 +0200
In-Reply-To: <20140902200907.GA18235@calimero.vinschen.de> (Corinna Vinschen's	message of "Tue, 2 Sep 2014 22:09:07 +0200")
Message-ID: <87oauxpy9v.fsf@Rainer.invalid>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.3.93 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain

Corinna Vinschen writes:
>   $ setfacl -d g:system: filename
>
> Note the trailing colon.  

That's not what the man page specifies, however.  I'll keep it in mind.

>> Removing the group
>> owner ACL instead did the right thing in at least one instance.
>
> ??? It shouldn't.  Removing the standard ACL entries for the owner,
> owner group, and other is not allowed:
>
>   $ setfacl -d g:: filename
>   setfacl: No error
>
> The "No error" is a bug, related to the fact that the aclsort() function
> doesn't set errno if aclcheck() failed.  I just fixed that in CVS.

I'll try that again to be sure.

>> I've mostly been removing all ACL from the whole tree via the explorer
>> security tab (for ~/.ssh/ and similar stuff).
>
> *All* ACL???  That sounds wrong to me.

Take ownership (if not already owner), give full acces and nuke
everything else (general read access for user and change permission for
admin groups of various sorts mostly).  Under Cygwin this then leaves a
clean mode (600 or 700, depending) with no "+" ACL.


Regards,
Achim.
-- 
+<[Q+ Matrix-12 WAVE#46+305 Neuron microQkb Andromeda XTk Blofeld]>+

Factory and User Sound Singles for Waldorf Q+, Q and microQ:
http://Synth.Stromeko.net/Downloads.html#WaldorfSounds

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple