DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org 0CCBC389202A
Date: Mon, 10 Jan 2022 11:07:47 +0100
From: Corinna Vinschen <corinna-cygwin@cygwin.com>
To: cygwin@cygwin.com
Subject: Re: Duplicate ACLs? - Can't copy file even with Admin permissions
Message-ID: <YdwFc2JA5FfH1Ktr@calimero.vinschen.de>
Mail-Followup-To: cygwin@cygwin.com, cygwin@kosowsky.org
References: <25043.7019.643488.389876@consult.pretender>
 <YdWCPsZOModGdRXM@calimero.vinschen.de>
 <8735m12k3u.fsf@Rainer.invalid>
 <25047.23325.33020.646017@consult.pretender>
 <25048.43238.484068.737126@consult.pretender>
MIME-Version: 1.0
Content-Disposition: inline
In-Reply-To: <25048.43238.484068.737126@consult.pretender>
Precedence: list
Reply-To: cygwin@cygwin.com
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: cygwin-bounces+archive-cygwin=delorie.com@cygwin.com
Sender: "Cygwin" <cygwin-bounces+archive-cygwin=delorie.com@cygwin.com>

On Jan  7 15:56, cygwin@kosowsky.org wrote:
> > Corinna Vinschen wrote:
> > On Jan  6 16:11, cyg...@kosowsky.org wrote:
> > It is.  I realized belatedly, that 3da9e136.acl is apparently a
> > directory, not a file.
> 
> It's actually a file...

This is weird.  The meaning of the OI and CI markers are "Object
inheritance" and "Container inheritance".  These bits only make sense
for directories and they control how ACEs are inherited by child objects
(files) and child containers (subdirs).

Consequentially, if I use `icacls /restore' on a file with the DACL
saved by you, the OI and CI bits are simply ignored.  After /restore,
if I call /save again the resulting file looks like this:

  $ cat aclfile-after-restore.sav
  acltest
  D:PAI(A;;FA;;;SY)(A;;0x1200a9;;;WD)(A;;FA;;;BA)

However, this gave me a clue.  If this is really a file, it's a good
chance that the inheritance flags are restricted to directories at
one point in either the Cygwin DLL itself, or the getfacl tool.

I'll have a look into the sources later, but I sure would prefer if
I could create such a file locally.


Thanks,
Corinna

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple