X-Recipient: archive-cygwin@delorie.com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=bJ7mJmwzjNWHnO/nNZhgnmf/TmWkoy/QqHU4Fn3lKRlqMNfu/ihYl
	KkMDAlzR4l7+YQz0VDjkni3pyYeuYzS9GDYHnTnO8f511EChIbhUnx1fYotvb+Do
	l552Tvy5sfnfZ34SA6nKODPYZWuiC5R8unzJn9QGnQAhfOn2w0SNOo=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	 bh=Bd2evMdHqAuKX7C4vVRqrO5blWA=; b=tFadMR9UOSglWKFDNCP4yMeCCqV5
	pGRN+jBWGZfsrXQcbDbACh0s1XCgvNbw+MkXsM5QN7FnKLLOFYnSbqF+fLCwJEno
	rpUS8McCsIR7JZbVSX3EuHG/j1toqOe015l2/EKsumgFc2pBDXWcDQIgNAKHNHJh
	19nKrqaMRrgyBp4=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe@cygwin.com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin@cygwin.com>
List-Help: <mailto:cygwin-help@cygwin.com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
Delivered-To: mailing list cygwin@cygwin.com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-5.4 required=5.0 tests=AWL,BAYES_00,KAM_LAZY_DOMAIN_SECURITY autolearn=no version=3.3.2
X-HELO: calimero.vinschen.de
Date: Sun, 29 Nov 2015 18:10:43 +0100
From: Corinna Vinschen <corinna-cygwin@cygwin.com>
To: cygwin@cygwin.com
Subject: Re: [ANNOUNCEMENT] TEST RELEASE: Cygwin 2.4.0-0.4
Message-ID: <20151129171043.GC2755@calimero.vinschen.de>
Reply-To: cygwin@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
References: <announce.20151121162447.GF2755@calimero.vinschen.de> <CABPLASTKt3uKcAbeLNjVa89wrWi_LO6MnPD0Fd=T0FxJG0r5mA@mail.gmail.com> <20151126131633.GL2755@calimero.vinschen.de> <CABPLASTpsNA4vGtONb14dQ87UV1gY=UAeHBgEXUmgztDeny_mg@mail.gmail.com> <CABPLASRpe+ey=dzuzkKYhu4UV=A10y9RkOzLxxA7v4o5CPtSag@mail.gmail.com> <20151128155421.GX2755@calimero.vinschen.de> <CABPLASSAabDkMK8ZwF0Q+a1N7enDW5SwuPu3_rnAFNdNZqfXmw@mail.gmail.com> <1352387525.20151129021637@yandex.ru> <20151129125921.GA2755@calimero.vinschen.de> <CABPLASTWGXVXf+YVx5Uwp6wqZqBmWRmkrFdoKCPR30QEV+4BVA@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;	protocol="application/pgp-signature"; boundary="fCmRXBY78W5odcVA"
Content-Disposition: inline
In-Reply-To: <CABPLASTWGXVXf+YVx5Uwp6wqZqBmWRmkrFdoKCPR30QEV+4BVA@mail.gmail.com>
User-Agent: Mutt/1.5.23 (2014-03-12)

--fCmRXBY78W5odcVA
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Nov 29 15:10, Kacper Michajlow wrote:
> 2015-11-29 13:59 GMT+01:00 Corinna Vinschen <corinna-cygwin@cygwin.com>:
> > On Nov 29 02:16, Andrey Repin wrote:
> >> Greetings, Kacper Michajlow!
> >>
> >> >> Please also attach the output of `id' and of `getfacl . test test/t=
est'.
> >>
> >> > getfacl attached. `id` output is already in cygcheck.log
> >>
> >> > In getfacl output this line `default:group:1001 <unknown>:r-x` looks
> >>
> >> Uh-oh.
> >> Do you, by any chance, have /etc/passwd file?
> >> Or a user comment changing relevant information?
> >
> > I agree with Andrey here: Uh oh!
> >
> > The mkdir trace contains a suspicious snippet which is the reason
> > the mkdir call doesn't manage to post-process the ACL:
> >
> >   [...] pwdgrp::fetch_account_from_windows: LookupAccountSidW (S-1-5-32=
-1001), Win32 error 1332
> >   [...] /[...]/security.cc:337 status 0xC0000078 -> windows error 1337
> >
> > Status 0xC0000078 aka Win32 error 1337 means "invalid SID".  And the
> > SID 1-5-32-1001 is in fact invalid.  The S-1-5-32 prefix denotes a buil=
tin
> > account, but the RID 1001 is invalid for a builtin group.  1001 is the
> > RID of your user account, though, but that would be prefixed by the SID
> > of your machine, which looks like S-1-5-21-XXXXXXXX-YYYYYYYY-ZZZZZZZZ.
> > I don't see how this broken SID came into life, unless your /etc/passwd
> > and/or /etc/group files are broken (hand edited perhaps?).
>=20
> I guess I only changed shell to zsh in /etc/passwd, but no other
> changes were made. So I have no idea how they could get corrupted
> either.

They aren't.  There is no 1-5-32-1001 SID in those files and both files
look entirely insuspicious.  Given that Cygwin doesn't create any such
SID from scratch, I'm totally puzzled where this SID is coming from.
Your mkdir trace output doesn't show this SID anywhere else either.
This definitely requires more debugging...

> $ icacls test
> test NULL SID:(DENY)(Rc,S)
>      DOMEK\Kacper:(F)
>      DOMEK\Kacper:(RX)
>      Wszyscy:(RX)
>      NULL SID:(OI)(CI)(IO)(DENY)(Rc,S)
>      TWORCA-WLASCICIEL:(OI)(CI)(IO)(F)
>      GRUPA TWORCOW:(OI)(CI)(IO)(RX)
>      Wszyscy:(OI)(CI)(IO)(RX)
>=20
> $ icacls test/test
> test/test NULL SID:(DENY)(Rc,S)
>           DOMEK\Kacper:(F)
>           DOMEK\Kacper:(RX)
>           Wszyscy:(RX)
>           NULL SID:(OI)(CI)(IO)(DENY)(Rc,S)
>           TWORCA-WLASCICIEL:(OI)(CI)(IO)(F)
>           GRUPA TWORCOW:(OI)(CI)(IO)(RX)
>           Wszyscy:(OI)(CI)(IO)(RX)

Looks better now.

> BTW. icacls doesn't handle UTF-8 characters well. Just saying.

Heh, yeah.  But given that icacls is a Windows tool, not a Cygwin
tool, I'm rather relaxed about this ;)  I'm wondering about the
lack of UTF-8 support in most Windows CLI tools myself.

> > - Try chmod 755 test/test again.
>=20
> Works.

Ok, that's good to know.  Now I just have to find out where this
weird SID was created :-P

> > - Also, would you mind to attach your /etc/passwd, /etc/group and
> >   /etc/nsswitch.conf files to your reply?
>=20
> /etc/nsswitch.conf has only commented out default values. Two others
> are attached. To make this clear, I never edited those files except
> zsh change

Not even the group entry for group 11001?  It doesn't look like an
entry which would get created automatically.

> so if they are corrupted in any way they must have been
> produced like that. Though it probably was over the year ago when I
> installed cygwin on this machine.

No, the files look ok, basically.

> I personally am fine with abandoning /etc/passwd and /etc/group. This
> is good enough solution for me. Though there might be other people
> with the same issue.

This seems to be a bug in Cygwin, and with the content of your files I
finally managed to reproduce the issue.  I'm planning to debug this next
week and, hopefully, come up with a patch.  It would be nice if you
could do another test then in your environment :}


Thanks,
Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--fCmRXBY78W5odcVA
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=4VOJ
-----END PGP SIGNATURE-----

--fCmRXBY78W5odcVA--