DMARC-Filter: OpenDMARC Filter v1.4.2 delorie.com 52ULipIx1440069
Authentication-Results: delorie.com; dmarc=pass (p=none dis=none) header.from=cygwin.com
Authentication-Results: delorie.com; spf=pass smtp.mailfrom=cygwin.com
DKIM-Filter: OpenDKIM Filter v2.11.0 delorie.com 52ULipIx1440069
Authentication-Results: delorie.com;
	dkim=pass (1024-bit key, unprotected) header.d=cygwin.com header.i=@cygwin.com header.a=rsa-sha256 header.s=default header.b=yUAgH596
X-Recipient: archive-cygwin@delorie.com
DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 3F20A3857039
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com;
	s=default; t=1743371090;
	bh=u+Ze+RZ3lYGP2tecgrmXjozzIqlI/k8cNeRTifSBVq4=;
	h=Date:To:Subject:References:In-Reply-To:List-Id:List-Unsubscribe:
	 List-Archive:List-Post:List-Help:List-Subscribe:From:Reply-To:Cc:
	 From;
	b=yUAgH596UhN0P7Sk/Nq8n7w/Tcbcn7sOyxWURQI/W2NIe3LUE6yPTdvShQaIysFTE
	 X3+HyWk4WWg7sJjJmNURQG2ldogfcGVTYX/WSoOsya2LoWzJJ1SUc+MH5paSPQdzGc
	 M6cAwzC8xCHeksXkufSBQWeSRNDOrjIHG7AMQgeo=
X-Original-To: cygwin@cygwin.com
Delivered-To: cygwin@cygwin.com
DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org DFCCD3857829
Date: Sun, 30 Mar 2025 23:43:26 +0200
To: Bruno Haible <bruno@clisp.org>
Subject: Re: symbolic link curiousity in 3.6.0
Message-ID: <Z-m6_ko6vD67A7_Q@calimero.vinschen.de>
Mail-Followup-To: Bruno Haible <bruno@clisp.org>, bug-gnulib@gnu.org,
 cygwin@cygwin.com
References: <Pine.BSF.4.63.2503250218240.74063@m0.truegem.net>
 <7892953.SKYDtnEIZr@nimes> <Z-fjk7zghYvvNGW4@calimero.vinschen.de>
 <2351191.D4D8VRik6i@nimes>
MIME-Version: 1.0
Content-Disposition: inline
In-Reply-To: <2351191.D4D8VRik6i@nimes>
X-BeenThere: cygwin@cygwin.com
X-Mailman-Version: 2.1.30
Precedence: list
List-Id: General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Unsubscribe: <https://cygwin.com/mailman/options/cygwin>,
 <mailto:cygwin-request@cygwin.com?subject=unsubscribe>
List-Archive: <https://cygwin.com/pipermail/cygwin/>
List-Post: <mailto:cygwin@cygwin.com>
List-Help: <mailto:cygwin-request@cygwin.com?subject=help>
List-Subscribe: <https://cygwin.com/mailman/listinfo/cygwin>,
 <mailto:cygwin-request@cygwin.com?subject=subscribe>
From: Corinna Vinschen via Cygwin <cygwin@cygwin.com>
Reply-To: cygwin@cygwin.com
Cc: Corinna Vinschen <corinna-cygwin@cygwin.com>, bug-gnulib@gnu.org,
        cygwin@cygwin.com
Content-Type: text/plain; charset="utf-8"
Errors-To: cygwin-bounces~archive-cygwin=delorie.com@cygwin.com
Sender: "Cygwin" <cygwin-bounces~archive-cygwin=delorie.com@cygwin.com>
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from base64 to 8bit by delorie.com id 52ULipIx1440069

Hi Bruno,

On Mar 29 15:02, Bruno Haible via Cygwin wrote:
> Corinna Vinschen wrote:
> > > Regarding what acl_extended_file() does, there is the man page by
> > > Andreas Grünbacher:
> > > https://www.kernel.org/doc/man-pages/online/pages/man3/acl_extended_file.3.html
> > > Gnulib is not the only user of acl_extended_file(); therefore I would
> > > suggest that Cygwin should follow that man page — regardless of Gnulib.
> > 
> > It already does!  The acl_extended_file() change for directories we just
> > talked about will actually be a deviation from Andreas' man page.
> 
> OK, then Cygwin's acl_extended_file should not change.

I'm not entirely sure here...

The three default perm entries are only effective outside Cygwin, so from
a POSIX point of view it's not really an extended ACL...

Btw., there's still a small bug in test-file-has-acl.sh.  It tries to
create an entry with gid 0:

  setfacl -m group:0:1 tmpfile0

But that's not possible, because there's no Windows group mapped to
uid or gid 0, unless you create your own /etc/passwd and /etc/group
files.

There's deliberately no default mapping from any Windows SID to user or
group 0, i.e., root, because there's no equivalent Windows account.
Administrator, Administrators, SYSTEM, Domain Admins, Backup Operators,
etc, etc... there's just no direct match possible, but the uid/gid must
map to a valid Windows SID.

What you can do is use group 1.  This group always exists, because
it maps to the group NT AUTHORITY\DIALUP, SID S-1-5-1.


Thanks,
Corinna


-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

