DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=UhKVbb9Bhc9kg64DvC2SzGqncecFgoAoIO5o18IINRP2OxLpo+CA+
	1f7OPBCdbFMFSmfifriwYDBl6BaSXnO2gPQcJURLGXnnW1dAyoXaa2+6cizP4beE
	nTP3lgq5wkbzfqOfAdb/ph8993F3+o+QBqj28s+yv42AyhjddIzMpU=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
Date: Fri, 18 Dec 2015 18:11:50 +0100
From: Corinna Vinschen <corinna-cygwin@cygwin.com>
To: cygwin@cygwin.com
Subject: Re: setfacl to remove a permission implicit adds another
Message-ID: <20151218171150.GP3507@calimero.vinschen.de>
Reply-To: cygwin@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
References: <5674265F.2040902@towo.net> <567430CD.1020801@towo.net>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;	protocol="application/pgp-signature"; boundary="ZNveOOYjKturpEFp"
Content-Disposition: inline
In-Reply-To: <567430CD.1020801@towo.net>
User-Agent: Mutt/1.5.23 (2014-03-12)

--ZNveOOYjKturpEFp
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Dec 18 17:14, Thomas Wolff wrote:
> I wrote:
> >...
> >After removing SYSTEM write permission with setfacl,
> >it was effectively removed for SYSTEM but the other groups got
> >write permission ADDED instead (as also properly indicated by ls) =E2=88=
=92
> >which is kind of the opposite of the intended operation.
> cygwin-2.4.0-0.11, sorry

In that case the behaviour is by design.  Try the same on Linux and the
result will be the same.  Every time you change group perms, the mask
will be changed to reflect the maximum permissions given to any group or
seccondary user.  You always have to check the mask or set it explicitely
to the desired value.


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--ZNveOOYjKturpEFp
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=uBoq
-----END PGP SIGNATURE-----

--ZNveOOYjKturpEFp--