DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=upWgJoQ91E9o7lEbDEacSgejCCYUi0hJGaJHoIjfliwDcMh1KLE1/
	UMyHRCj4krrHrsLE1nV94c7zZnnNqCe3sPN3UGny8n2TwpP5xJJ4qx15p2csJirl
	RS3zSq8LvIh1SRz34zjta8kuTcJzWhJC/46XC4BD9j+1mKyy+KBE2Y=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
Date: Thu, 26 Feb 2015 21:57:36 +0100
From: Corinna Vinschen <corinna-cygwin@cygwin.com>
To: cygwin@cygwin.com
Subject: Re: Too Many Permissions Stripped In 1.7.35?
Message-ID: <20150226205736.GA10870@calimero.vinschen.de>
Reply-To: cygwin@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
References: <CADi7v6JajieaQGq3N5LY2Ck2m7SiOTci6au5t7RL4gxZdvBgEw@mail.gmail.com> <87twy8cv4k.fsf@Rainer.invalid> <20150226202836.GB10024@calimero.vinschen.de> <CADi7v6LLEhH9Dn3X3+W4Fk2=r7brDKuSHoJT3f7P31FX8523fg@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;	protocol="application/pgp-signature"; boundary="y0ulUmNC+osPPQO6"
Content-Disposition: inline
In-Reply-To: <CADi7v6LLEhH9Dn3X3+W4Fk2=r7brDKuSHoJT3f7P31FX8523fg@mail.gmail.com>
User-Agent: Mutt/1.5.23 (2014-03-12)

--y0ulUmNC+osPPQO6
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Feb 26 15:51, Bryan Berns wrote:
> > That's not really a goal.  The SYSTEM permissions are kind of useless
> > anyway, given that SYSTEM has permissions to read and write all files
> > anyway.  I don't see that a rule to add SYSTEM permissions to all files
> > accomplishes anything which isn't already available anyway.
>=20
> I don't think this is true; see below when running as the system account:
>=20
> V:\>echo %USERNAME%
> BERNS-WINDOWS$
> V:\>icacls V:\Test
> V:\Test DOMAIN\Administrator:(OI)(CI)(F)
> Successfully processed 1 files; Failed processing 0 files
> V:\>cd V:\Test
> Access is denied.
> V:\>

You just have to enable the SeBackupName and SeRestoreName privs.
Try in Cygwin.  It does that automatically.

For cases where you need to stick to the Windows ACLs, use noacl
mounts.


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--y0ulUmNC+osPPQO6
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=r4wK
-----END PGP SIGNATURE-----

--y0ulUmNC+osPPQO6--