DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:date:message-id:subject:from:to
	:content-type; q=dns; s=default; b=RpFk6LknsmQwLtRshijb4I5JUMlBh
	aGozF+uuNOjd4F7wqtEF6I35DmccO7VEDIvIYwWjWdgzGNfPI+NciS9OYXvsrsTl
	7PXL72xT15XogVh0FAT/HZurfUByNv0jcXTb+GsHSu5CQUsXZ5TxE7FD+e0WOnIX
	Or2T5gFeaVPlr4=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
MIME-Version: 1.0
Date: Wed, 1 Apr 2015 15:56:09 -0400
Message-ID: <CADi7v6K6Xbz3JYB-=JC23YMCEHzhmV3sSOAtcE73ydTecbcR-Q@mail.gmail.com>
Subject: File Permissions - Yet Another Question / Clarification
From: Bryan Berns <bryan.berns@gmail.com>
To: cygwin@cygwin.com
Content-Type: text/plain; charset=UTF-8

I finally am moving my user community to Cygwin 1.7.35 at work and
having some issues with ssh not thinking user's ssh keys are owned by
the user.  I indeed can see that their directory listings do not show
their userid as having read,write, or execute to *any* of their files.

In short, just wanted to make sure behavior like that demonstrated
below is "by design".  In particular, I find it odd that "Domain
Users" is the only entity that is listed as having permissions despite
not being in the DACL at all.  On the plus side, the startup speed is
much, much faster than before and we no longer need to worry about
maintaining our HUGE passwd and groups files.  Any thoughts are
appreciated.  I've read the ntsec page and still digesting all
information...

@ umask
77
@ whoami
bernsbj
@ touch mytestfile
@ ls -l mytestfile
----rwx---+ 1 bernsbj Domain Users 0 Apr  1 15:38 mytestfile
@ icacls mytestfile
mytestfile MYDOMAIN\bernsbj:(I)(F)
          BUILTIN\Administrators:(I)(F)
         OTHERDOMAIN\Domain Admins:(I)(F)

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple