X-Recipient: archive-cygwin AT delorie DOT com
X-SWARE-Spam-Status: No, hits=-2.5 required=5.0 	tests=AWL,BAYES_00,SPF_PASS
X-Spam-Check-By: sourceware.org
Message-ID: <4A807316.2070103@gmail.com>
Date: Mon, 10 Aug 2009 20:20:54 +0100
From: Dave Korn <dave DOT korn DOT cygwin AT googlemail DOT com>
User-Agent: Thunderbird 2.0.0.17 (Windows/20080914)
MIME-Version: 1.0
To: cygwin AT cygwin DOT com
Subject: Re: [1.7] cygwin allows writing to readonly files
References: <e2480c70908100619m906f5dfj794823f22c7604bc AT mail DOT gmail DOT com> 	 <20090810132515 DOT GP3204 AT calimero DOT vinschen DOT de> 	 <e2480c70908100911j520101cftbaf4dc3eb08b109e AT mail DOT gmail DOT com> <e2480c70908101150h47cd26eck9f5dac5e597c99a0 AT mail DOT gmail DOT com>
In-Reply-To: <e2480c70908101150h47cd26eck9f5dac5e597c99a0@mail.gmail.com>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com

Alexey Borzenkov wrote:
> On Mon, Aug 10, 2009 at 8:11 PM, Alexey Borzenkov<snaury AT gmail DOT com> wrote:
>> Anyway, it means there is a bug in perl, because on Linux:
> 
> On second though, it is actually bug in Cygwin. Programs and libraries expect
> superuser behavior only when user id is zero, which is clearly not the case
> in Cygwin 1.7.

http://www.opengroup.org/onlinepubs/000095399/xrat/xbd_chap03.html

> Superuser*
> 
> This concept, with great historical significance to UNIX system users, has
> been replaced with the notion of appropriate privileges.

  This would seem to imply that it is permitted for there to be users other than
uid 0 with "appropriate" privileges.  Programs should not be trying to
second-guess the OS about the privs of a uid, they should ask the access()
function and find out.

    cheers,
      DaveK

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple