DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:reply-to:message-id:to:subject
	:in-reply-to:references:mime-version:content-type
	:content-transfer-encoding; q=dns; s=default; b=y3XgwOG8naNYo2w3
	+BvBPSmjq8dnqHZD5vHNHJprBRyP1IZVjX+h1UlQXMx5pnB2wUqfg3HG214Bxo+y
	y3iDYleaTydr+15TdUfnoNXLFRbsceg+XYYAnz1XHf6WVqD5e+z/DQsQR2MMKRrL
	ONlliQ/iUqqHj3gCio+cxJi/3eg=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
Date: Sat, 11 Apr 2015 19:01:30 +0300
From: Andrey Repin <anrdaemon@yandex.ru>
Reply-To: cygwin@cygwin.com
Message-ID: <2310238890.20150411190130@yandex.ru>
To: Achim Gratz <Stromeko@nexgo.de>, cygwin@cygwin.com
Subject: Re: [TESTERS needed] New POSIX permission handling
In-Reply-To: <87lhhzcarc.fsf@Rainer.invalid>
References: <20150410100703.GA4401@calimero.vinschen.de> <87lhhzcarc.fsf@Rainer.invalid>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

Greetings, Achim Gratz!

> Corinna Vinschen writes:
>> - To accommodate Windows default ACLs, the new code ignores SYSTEM and
>>   Administrators group permissions when computing the MASK/CLASS_OBJ
>>   permission mask on old ACLs, and it doesn't deny access to SYSTEM and
>>   Administrators group based on the value of MASK/CLASS_OBJ when
>>   creating the new ACLs.

> Since you've now opened that can of worms of who is considered "root",
> what about "Domain Administrators" or "Power Users", for starters?

"Domain Admins" is a members of local "Administrators" group.
And "Power Users" are just users with a little more power, but not by much.


-- 
With best regards,
Andrey Repin
Saturday, April 11, 2015 18:58:52

Sorry for my terrible english...


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple