DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org 3F264385AC33
Date: Tue, 25 Jan 2022 20:19:42 +0100
From: Corinna Vinschen <corinna-cygwin@cygwin.com>
To: cygwin@cygwin.com
Subject: Re: Duplicate ACLs? - Can't copy file even with Admin permissions
Message-ID: <YfBNTtpyu91+4Qz/@calimero.vinschen.de>
Mail-Followup-To: cygwin@cygwin.com
References: <25043.7019.643488.389876@consult.pretender>
 <YdWCPsZOModGdRXM@calimero.vinschen.de>
 <8735m12k3u.fsf@Rainer.invalid>
 <25047.23325.33020.646017@consult.pretender>
 <25048.43238.484068.737126@consult.pretender>
 <YdwFc2JA5FfH1Ktr@calimero.vinschen.de>
 <Ydw4stFxX+he1A6b@calimero.vinschen.de>
 <25063.30447.365452.499124@consult.pretender>
 <YefFIwM4POThNgRA@calimero.vinschen.de>
 <25066.48079.253017.253466@consult.pretender>
MIME-Version: 1.0
Content-Disposition: inline
In-Reply-To: <25066.48079.253017.253466@consult.pretender>
Precedence: list
Reply-To: cygwin@cygwin.com
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: cygwin-bounces+archive-cygwin=delorie.com@cygwin.com
Sender: "Cygwin" <cygwin-bounces+archive-cygwin=delorie.com@cygwin.com>

On Jan 21 08:57, cygwin@kosowsky.org wrote:
> Hi Corinna,
> I found another file with ACLs that fail even under the new snapshot
> cygwin1.dll.
> 
> #getfacl setup.ilg
> # file: setup.ilg
> # owner: Administrators
> # group: None
> getfacl: setup.ilg: Invalid argument
> 
> #icacls.exe setup.ilg
> setup.ilg NT SERVICE\TrustedInstaller:(I)(F)
>           NT SERVICE\TrustedInstaller:(I)(CI)(IO)(F)
>           NT AUTHORITY\SYSTEM:(I)(F)
>           NT AUTHORITY\SYSTEM:(I)(OI)(CI)(IO)(F)
>           BUILTIN\Administrators:(I)(F)
>           BUILTIN\Administrators:(I)(OI)(CI)(IO)(F)
>           BUILTIN\Users:(I)(RX)
>           BUILTIN\Users:(I)(OI)(CI)(IO)(GR,GE)
>           CREATOR OWNER:(I)(OI)(CI)(IO)(F)
> 
> #icacls.exe setup.ilg /save setup.acl
> #cat setup.acl
> setup.ilg
> D:(A;ID;FA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;CIIOID;GA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;ID;FA;;;SY)(A;OICIIOID;GA;;;SY)(A;ID;FA;;;BA)(A;OICIIOID;GA;;;BA)(A;ID;0x1200a9;;;BU)(A;OICIIOID;GXGR;;;BU)(A;OICIIOID;GA;;;CO)
> 
> -------------
> Any thoughts on what might be wrong here?

Again, the permissions don't make sense.  However, that's no good reason
for Cygwin to bail out like this.  I found the culprit, the core function
was still setting a certain indicator value for default ACEs even on
files.  I pushed a patch and created new developer snapshots.


Thanks,
Corinna

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple