DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:date:message-id:subject:from:to
	:content-type; q=dns; s=default; b=eU5k4KT2REMP2Ef14xqTbPWzmB4eT
	xIPYb/fx8s+0/9AvYgFnPOA51LzuoutgzYb1yxiU+EkiImjb+PU8BsMNHWBcOd7S
	0L16Wn6DicBU3o4j1ReEgw+cf2cE3AKrt+5TJQtDQ61iS1cbvrTj94SiB6puIOSk
	aeqk4X+JKV56so=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
MIME-Version: 1.0
Date: Sun, 12 Oct 2014 20:37:18 -0400
Message-ID: <CADi7v6J5xOcDuv=4aODLswMBSDLaAcNXs5yCM=WBsqbsrLV+zg@mail.gmail.com>
Subject: Necessary To Query SACL Information?
From: Bryan Berns <bryan.berns@gmail.com>
To: cygwin@cygwin.com
Content-Type: text/plain; charset=UTF-8

I noticed when I launch an executable, Cygwin queries SACL information
on the executable (which I can see in Process Monitor as a
'QuerySecurityFile' operation).  On some of my protected file servers,
this generates a failure audit.  Looking at the source code, I'm going
to guess this might be from the NtQuerySecurityObject call in
security.cc which requests SACL information by asking for for
ALL_SECURITY_INFORMATION.  Does Cygwin really need to query this
information? Aside from keeping my audit logs clean, it seems like it
might be an opportunity for optimizing the executable launch process
if Cygwin doesn't really need this (or some of the other information
that ALL_SECURITY_INFORMATION provides).

Thoughts?

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple