DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=RnEPFMEWNBqAc+oTpbT4NpgT4eov0dpU77Jjkus7iqian4oGMlzCQ
	b9db4WPmd4KH+ILkZ5Me6gHkaHJg6ZdfRJgsamNdGYsPVKpxK5jNFOojfcZLgk64
	fl1kqrIM7nNMZKRXCL9sUNl/ZF+jMDXWvHEIZMpRZej6QeZVaA1NOw=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
Date: Wed, 1 Apr 2015 09:38:24 +0200
From: Corinna Vinschen <corinna-cygwin@cygwin.com>
To: cygwin@cygwin.com
Subject: Re: More about permissions
Message-ID: <20150401073824.GB493@calimero.vinschen.de>
Reply-To: cygwin@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
References: <551A13D8.1030701@cs.umass.edu> <20150331101534.GE32403@calimero.vinschen.de> <551A9149.4020408@cs.umass.edu> <1837571490.20150331235503@yandex.ru> <551B3EA8.4050607@cs.umass.edu> <392349513.20150401035240@yandex.ru>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;	protocol="application/pgp-signature"; boundary="TRYliJ5NKNqkz5bu"
Content-Disposition: inline
In-Reply-To: <392349513.20150401035240@yandex.ru>
User-Agent: Mutt/1.5.23 (2014-03-12)

--TRYliJ5NKNqkz5bu
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Apr  1 03:52, Andrey Repin wrote:
> > Now where this really makes a difference is when I am transferring file=
s between my Windows
> > system and other systems that are Unix-based, using git, rsync, and suc=
h tools.
> > Either I remove SYSTEM access or the permissions get messed up.
>=20
> That's one of the reasons why I think SYSTEM account privileges needs to =
be
> hidden from POSIX access mask. It needs to be shown in getfacl to reduce
> confusion, though, but otherwise there's no case, where hiding it could c=
ause
> any more harm, than showing it.
>=20
> >>> Maybe what I am looking for is something like this:
> >>
> >>> - Certain Windows accounts/groups would be treated as 'root' for cygw=
in's
> >>>     purposes, perhaps controlled by a list in a file read when cygwin=
 starts up.
>=20
> >> The list would be very short. "NT AUTHORITY\SYSTEM".
>=20
> > Ok -- I would be happy with that, rather than having g+rwx happening to=
 every
> > file because I am granting SYSTEM access.
>=20
> > Do you begin to see the bind I feel myself in?
>=20
> Do tell me? I'm perpetually caught in it.

Sigh.  This is really annoying from a developer's POV.

Yes, yes, I still have "ignore SYSTEM in group handling?" on my TODO
list...


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--TRYliJ5NKNqkz5bu
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQIcBAEBAgAGBQJVG6BwAAoJEPU2Bp2uRE+gdhcP/3Mw4YYaeH0SQZnAC/0zWxJS
wOJqTazPN30yEf0vq1201lK2YdHrHhKwYD7e2OoR5U9H/bB3bwD1jtvnV/KsswTi
eIwTlCPN53DRxMiBt5cX34QsziWEKnt+j5lvY13eHyz03ma2RdoB3VjrpTaKgpCL
3TfouH7dTji4y2KRiKGD6Axj+ILF/YylOKP4sIFmphW+L9SfJYyO6qSlf/gbfjCO
YOUrmQzpNIRGUF6QITU3My6GEt+Zik77FVC/adK2NhEaUHUKN0H6voU3ivTIK5LU
hOn3Q6/DZjT3dgpOs4mLcO/1xQfmAwzPK80YGlLpcgLwktgpiXG/Girgg56NzjM5
d/FCdi4oMs9rHVDt303Ur12p1tWtqNmO+hN/0CXR+3KvqDe9s9nbAg9vMf3CF2fe
6a0i06iOF2kuzBUHmQagG4APqf9I+cUXvz5UCcvRJbvR9Dds3ufWc4mjI8yATKIe
Ggo6PBaTvRQtq34hN1RqKF6jhu5VGJbTQ7NavM5DZY2lztKNOmNC++F5wITGkRP4
uGvstmrk/11GtdBZX8LzvPSN9r+751rn0d2QLLDgHJq9lE/SBHxF/4dq7x0jj7G/
GcLbzMwA005QH48jlOebRY6hmX63hAgs3KYV6La57IrEMOyl5G6JjJb+h3oJKsBK
Ysw4yR6GQBLJfE+7pF9l
=DSBa
-----END PGP SIGNATURE-----

--TRYliJ5NKNqkz5bu--