DMARC-Filter: OpenDMARC Filter v1.4.2 delorie.com 5AFI6Wrf623143
DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org F06983858D1E
MIME-Version: 1.0
References: <CA+1jF5q8VmGAiUyrQQ1dLa_0KLByfsFLtic86kr61HTTFAm9oA@mail.gmail.com>
 <0a1391ac-adba-4420-b581-ccdb3842109a@towo.net>
In-Reply-To: <0a1391ac-adba-4420-b581-ccdb3842109a@towo.net>
Date: Sat, 15 Nov 2025 19:05:00 +0100
Message-ID: <CA+1jF5r47SbFZHk4rp0z8K0ezGhrZpaVUu6pKMb=4VJnYQ0vcg@mail.gmail.com>
Subject: Re: Cygwin API to atomically create a new file with an ACL?
To: cygwin@cygwin.com
From: =?utf-8?q?Aur=C3=A9lien_Couderc_via_Cygwin?= <cygwin@cygwin.com>
Reply-To: =?UTF-8?Q?Aur=C3=A9lien_Couderc?= <aurelien.couderc2002@gmail.com>
Content-Type: text/plain; charset="utf-8"
Sender: "Cygwin" <cygwin-bounces~archive-cygwin=delorie.com@cygwin.com>
Content-Transfer-Encoding: 8bit

On Sat, Nov 15, 2025 at 3:43 PM Thomas Wolff via Cygwin
<cygwin@cygwin.com> wrote:
>
>
> Am 15.11.2025 um 13:58 schrieb Aurélien Couderc via Cygwin:
> > Does Cygwin have an API to atomically create a new file with an ACL?
> >
> > Aurélien
> I don't think there's such an API in POSIX. Instead it's the purpose of
> the directory default ACL entries to support this.
> While the manual pages of setfacl/getfacl are lousy, a fairly lucid
> description is in 7.6. POSIX Access Control Lists | Administration Guide
> | Red Hat Gluster Storage | 3 | Red Hat Documentation
> <https://docs.redhat.com/en/documentation/red_hat_gluster_storage/3/html/administration_guide/sect-posix_access_control_lists>.

That does not help. There are valid use cases, where this becomes
security relevant due race conditions between file creation and
setting of the ACLs.

That's why all mainframe operating systems (and Windows WinNT as VMS
descendant) which support ACLs also support file creation with ACLs as
an argument.

Aurélien
-- 
Aurélien Couderc <aurelien.couderc2002@gmail.com>
Big Data/Data mining expert, chess enthusiast

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple