DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=JdskpQXPwWbPgTRRsOpTORWxQinfiT8N+/0/ko5R3a/wcBvPfZ6mF
	EKWR2lPsLZ5xE4RzlXfvtt2ZmFj9gOxqRbcZozaYSo5rRkb9ZclZ1X78fqCBrjvi
	GYM9eIWW5efyHyT4WSgdiToINaAqHzuGPMFeKv5v19jHn+WVJSW+Vc=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
Date: Sat, 28 Nov 2015 16:54:21 +0100
From: Corinna Vinschen <corinna-cygwin@cygwin.com>
To: cygwin@cygwin.com
Subject: Re: [ANNOUNCEMENT] TEST RELEASE: Cygwin 2.4.0-0.4
Message-ID: <20151128155421.GX2755@calimero.vinschen.de>
Reply-To: cygwin@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
References: <announce.20151121162447.GF2755@calimero.vinschen.de> <CABPLASTKt3uKcAbeLNjVa89wrWi_LO6MnPD0Fd=T0FxJG0r5mA@mail.gmail.com> <20151126131633.GL2755@calimero.vinschen.de> <CABPLASTpsNA4vGtONb14dQ87UV1gY=UAeHBgEXUmgztDeny_mg@mail.gmail.com> <CABPLASRpe+ey=dzuzkKYhu4UV=A10y9RkOzLxxA7v4o5CPtSag@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;	protocol="application/pgp-signature"; boundary="6zn93sY2JrH9m7VZ"
Content-Disposition: inline
In-Reply-To: <CABPLASRpe+ey=dzuzkKYhu4UV=A10y9RkOzLxxA7v4o5CPtSag@mail.gmail.com>
User-Agent: Mutt/1.5.23 (2014-03-12)

--6zn93sY2JrH9m7VZ
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Nov 27 20:15, Kacper Michajlow wrote:
> 2015-11-27 20:02 GMT+01:00 Kacper Michajlow <kasper93@gmail.com>:
> > 2015-11-26 14:16 GMT+01:00 Corinna Vinschen <corinna-cygwin@cygwin.com>:
> >> Hi Kacper,
> >>
> >> On Nov 23 19:09, Kacper Michajlow wrote:
> >>> 2015-11-21 17:24 GMT+01:00 Corinna Vinschen <corinna-cygwin@cygwin.co=
m>:
> >>> > Hi Cygwin friends and users,
> >>> >
> >>> >
> >>> > I released a new TEST version of Cygwin, 2.4.0-0.4.
> >>> >
> >>>
> >>> With this version I get permissions denied when trying to chmod a
> >>> folder created in a created folder...
> >>>
> >>> Basically this doesn't work for me:
> >>> mkdir test
> >>> mkdir test/test
> >>> chmod 755 test/test
> >>
> >> I need to see the ACLs of the parent dir of test, the ACL of test and
> >> the ACL of test/test via the icacls command, before calling chmod.
>=20
> I'm using Microsoft account. Here is requested information

I can't reproduce this.  I'm using a local test account which is connected
to a Microsoft account.  The permissions of the parent folder are identical
to yours:

> $ pwd
> /home/Kacper
> $ icacls .
> . DOMEK\Kacper:(F)
>   Wszyscy:(RX)
>   TWORCA-WLASCICIEL:(OI)(CI)(IO)(F)
>   GRUPA TWORCOW:(OI)(CI)(IO)(RX)
>   Wszyscy:(OI)(CI)(IO)(RX)

  $ icacls .
  . VMBERT8164\local_000:(F)
    Everyone:(RX)
    CREATOR OWNER:(OI)(CI)(IO)(F)
    CREATOR GROUP:(OI)(CI)(IO)(RX)
    Everyone:(OI)(CI)(IO)(RX)

> $ mkdir test
> $ icacls test
> test NULL SID:(DENY)(Rc,S)
>      DOMEK\Kacper:(F)
>      DOMEK\Kacper:(RX)
>      Wszyscy:(RX)
>      NULL SID:(OI)(CI)(IO)(DENY)(Rc,S)
>      TWORCA-WLASCICIEL:(OI)(CI)(IO)(F)
>      DOMEK\Kacper:(OI)(CI)(IO)(RX)

       ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ See below

>      GRUPA TWORCOW:(OI)(CI)(IO)(RX)
>      Wszyscy:(OI)(CI)(IO)(RX)

  $ mkdir test
  $ icacls test
  test NULL SID:(DENY)(Rc,S)
       VMBERT8164\local_000:(F)
       VMBERT8164\local_000:(RX)
       Everyone:(RX)
       NULL SID:(OI)(CI)(IO)(DENY)(Rc,S)
       CREATOR OWNER:(OI)(CI)(IO)(F)
       CREATOR GROUP:(OI)(CI)(IO)(RX)
       Everyone:(OI)(CI)(IO)(RX)

Note that in my case the inheritable explicit permissions for the
owner account (^^^^^) are not generated, which is already puzzeling
just by itself.

But the test/test icacls output explains why chmod fails:

> $ mkdir test/test
> $ icacls test/test
> test/test NULL SID:(OI)(CI)(DENY)(Rc,S)
>           DOMEK\Kacper:(F)
>           TWORCA-WLASCICIEL:(OI)(CI)(IO)(F)
>           DOMEK\Kacper:(OI)(CI)(RX)
>           DOMEK\Kacper:(RX)
>           GRUPA TWORCOW:(OI)(CI)(IO)(RX)
>           Wszyscy:(OI)(CI)(RX)

This is how the ACL looks like after creating the directory, but before
Cygwin performs ACL post-processing.  The only possible reason for this
is that already the mkdir call failed to fix the ACL.  But it's not clear
why this happens.  Your account has "F"ull permissions, so it also has
WRITE_DAC permissions.

> Tell me if you need any more info.

Yes.  First of all, please send cygcheck -svr output as requested on
http://cygwin.com/problems.html.

Next, when you wrote "With this version ...", does that mean this
is a regression from 2.4.0-0.2 to 2.4.0-0.4, or did you compare with
2.3.1-1?  I'm asking because I'd like to know in which version the
regression occured.

Is "DOMEK" the name of your local machine or an AD domain?

What filesystem is that on?  Local or remote share?  Real NTFS or some
other filesystem?  I'm asking because on some remote filesystems even
the owner of a file may have no WRITE_DAC permissions, despite having
supposedly "full" permissions.

Can you please rmdir test/test and then run mkdir under strace:

  $ strace -o mkdir.trace mkdir test/test

and attach the trace file to your reply?  Please use ther latest
2.4.0-0.5, just to be sure.

Please also attach the output of `id' and of `getfacl . test test/test'.


Thanks,
Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--6zn93sY2JrH9m7VZ
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=tdI+
-----END PGP SIGNATURE-----

--6zn93sY2JrH9m7VZ--