X-Recipient: archive-cygwin AT delorie DOT com
X-SWARE-Spam-Status: No, hits=-2.6 required=5.0 	tests=BAYES_00
X-Spam-Check-By: sourceware.org
X-ASG-Debug-ID: 1256340082-665e00020000-w5GHUG
X-Barracuda-URL: http://postoffice2.aconex.com:8000/cgi-bin/mark.cgi
X-Barracuda-Envelope-From: mward AT aconex DOT com
X-ASG-Orig-Subj: Re: default ACLs
Subject: Re: default ACLs
From: Mikel Ward <mward AT aconex DOT com>
To: cygwin AT cygwin DOT com
In-Reply-To: <20091023152726.GB5369@calimero.vinschen.de>
References: <1256255127 DOT 2713 DOT 41 DOT camel AT mward-laptop DOT ops DOT acx> 	 <20091023152726 DOT GB5369 AT calimero DOT vinschen DOT de>
Content-Type: text/plain
Date: Sat, 24 Oct 2009 10:21:15 +1100
Message-Id: <1256340075.2582.39.camel@mward-laptop>
Mime-Version: 1.0
Content-Transfer-Encoding: 7bit
X-Barracuda-Connect: postoffice.yarra.acx[192.168.102.1]
X-Barracuda-Start-Time: 1256340082
X-Barracuda-Virus-Scanned: by Aconex Staff Email Spam Firewall at aconex.com
X-IsSubscribed: yes
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Precedence: bulk
List-Id: <cygwin.cygwin.com>
List-Unsubscribe: <mailto:cygwin-unsubscribe-archive-cygwin=delorie DOT com AT cygwin DOT com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com

Corinna wrote:
> Neither the NtCreateFile function, nor the
> CreateFile function handle ACE inheritance either. 

Looks like that's only if lpSecurityAttributes is non-NULL, but I guess
Cygwin uses that field?

"Windows Server 2003 and Windows XP/2000:  For backward compatibility
purposes, CreateFile does not apply inheritance rules when you specify a
security descriptor in lpSecurityAttributes. To support inheritance,
functions that later query the security descriptor of this file may
heuristically determine and report that inheritance is in effect. For
more information, see Automatic Propagation of Inheritable ACEs."

Out of interest I'm going to have a look at SECURITY_DESCRIPTORs, but
it'll take some time. :-)

> Thanks for the report
Thanks for taking a look!





--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple