DMARC-Filter: OpenDMARC Filter v1.4.2 delorie.com 4ABCKwMK3798106
DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org B4E453858D21
Date: Mon, 11 Nov 2024 21:19:53 +0900
To: cygwin@cygwin.com
Subject: Re: SMBFS mount's file cannot be made executable
Message-Id: <20241111211953.605b186566ce3a44ca929788@nifty.ne.jp>
In-Reply-To: <ZzHyhoWnNvkTQYW-@calimero.vinschen.de>
References: <BL0PR0901MB430827F1A0668E468B498FBBA5D70@BL0PR0901MB4308.namprd09.prod.outlook.com>
 <20241108205109.55f99e2d172b9fc87e92ae67@nifty.ne.jp>
 <Zy4ODHHpmZPggGSz@calimero.vinschen.de>
 <20241111193152.c3a81044a03ecf2093185166@nifty.ne.jp>
 <ZzHizX_6FXABDPvZ@calimero.vinschen.de>
 <20241111201928.811a2f8f09142b7aa8fe9bdc@nifty.ne.jp>
 <20241111203202.b22bcf4f9030aff58299fe0e@nifty.ne.jp>
 <20241111204051.493f12208bb59d62b699dd28@nifty.ne.jp>
 <ZzHyhoWnNvkTQYW-@calimero.vinschen.de>
Mime-Version: 1.0
Precedence: list
From: Takashi Yano via Cygwin <cygwin@cygwin.com>
Reply-To: Takashi Yano <takashi.yano@nifty.ne.jp>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: cygwin-bounces~archive-cygwin=delorie.com@cygwin.com
Sender: "Cygwin" <cygwin-bounces~archive-cygwin=delorie.com@cygwin.com>

On Mon, 11 Nov 2024 13:03:18 +0100
Corinna Vinschen wrote:
> On Nov 11 20:40, Takashi Yano via Cygwin wrote:
> > On Mon, 11 Nov 2024 20:32:02 +0900
> > Takashi Yano via Cygwin <cygwin@cygwin.com> wrote:
> > > Even with this patch, the file:
> > > 
> > > yano $ touch samba_test_file.txt
> > > yano $ ls -l samba_test_files.txt
> > > -rw-r--r-- 1 yano yano 0 Nov 11 20:25 samba_test_file.txt
> > 
> > Oops! This was wrong.
> > -rw-r--r-- 1 Unknown+User Unix_Group+1000 0 Nov 11 20:25 samba_test_file.txt
> 
> That's Samba for you.  I applied your patch and created a file
> on my share, and the Authenticated Users group was not in the
> resulting ACL.  Only user, group, and Everyone.
> 
> Either way, I don't think this is the right thing to do.  Even if
> the group isn't added to the ACL on my machine, it still loks like
> a security problem in waiting.

Isn't this DACL here used only for access_check() (NtAccessCheck())?
In my environment, the Authenticated Users does not appear in the ACL
too.

-- 
Takashi Yano <takashi.yano@nifty.ne.jp>

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple