X-Recipient: archive-cygwin@delorie.com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:to:from:subject:date:message-id:references
	:mime-version:content-type:content-transfer-encoding; q=dns; s=
	default; b=RHZl5VhqR6L395ZJJmEomZzp9u+Rj62NCwivKPGD0fr3/57AJYinh
	uPkWMmW72Fn7JPFT2jqM30u+HWq0oLpsPjMCtGcbT4tEwscrdzRRpIsNCsZTrWxE
	Olj9R6TEfW2AXCaU5AOKWFgCZTbmCD+7jupnfMT00SPQ5JFvR/b7pg=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:to:from:subject:date:message-id:references
	:mime-version:content-type:content-transfer-encoding; s=default;
	 bh=QTiql1/oyiw+PIYRn2A9Yc9V6wY=; b=e3dGwF8YrITCDsQs3aBIxESGlQnf
	BunF9MZ5YLiZAiBxWzVOof1qCtRkrK6gJPMDtu85NbgmB5jQRNWomVqW/SZm17mM
	2bj/KfgkUkkhs7MRzAEjeZA/DpDwYUx/XDyziiX0RS4eb6r2pB4mKB1XFpMfu4TE
	C6G4eSetysYi800=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe@cygwin.com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin@cygwin.com>
List-Help: <mailto:cygwin-help@cygwin.com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
Delivered-To: mailing list cygwin@cygwin.com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-4.8 required=5.0 tests=AWL,BAYES_40,RCVD_IN_DNSWL_LOW,RCVD_NUMERIC_HELO,SPF_HELO_PASS,SPF_PASS,T_FSL_HELO_BARE_IP_2,T_RP_MATCHES_RCVD autolearn=no version=3.3.2
X-HELO: plane.gmane.org
To: cygwin@cygwin.com
From: Achim Gratz <Stromeko@NexGo.DE>
Subject: Re: [ANNOUNCEMENT] Updated: Cygwin 1.7.35-1
Date: Fri, 6 Mar 2015 12:51:10 +0000 (UTC)
Lines: 17
Message-ID: <loom.20150306T134526-167@post.gmane.org>
References: <announce.20150304112636.GI3213@calimero.vinschen.de>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
User-Agent: Loom/3.14 (http://gmane.org/)
X-IsSubscribed: yes

Corinna Vinschen <corinna-cygwin <at> cygwin.com> writes:
> - Change handling of group permissions if owner SID == group SID.  Now the
>   group permissions don't mirror the user permissions anymore, thus leading
>   to less hassle with security-conscious applications.

There's another tricky situation that is not yet handled:

If the file is owned by myself and I'm in a group that allows full access
(but not ACL modifications), Cygwin will show that file as having mode
"---rwx---+".  Applications that follow POSIX semantics will interpret that
file as unreadable by the owner (==current user) and skip checking the group
permissions, while NTFS will still happily grant that access.  So in that
situation the group permissions need to be promoted to the owner permissions.


Regards,
Achim.fare


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple