X-Recipient: archive-cygwin AT delorie DOT com
X-SWARE-Spam-Status: No, hits=-1.7 required=5.0	tests=AWL,BAYES_00,DKIM_ADSP_CUSTOM_MED,FREEMAIL_FROM,NML_ADSP_CUSTOM_MED,RP_MATCHES_RCVD,SPF_HELO_PASS
X-Spam-Check-By: sourceware.org
To: cygwin AT cygwin DOT com
From: Oleksandr Gavenko <gavenkoa AT gmail DOT com>
Subject: Re: Help with ACL and POSIX permissions for external flash/HD.
Date: Mon, 31 Oct 2011 22:39:27 +0200
Lines: 85
Message-ID: <j8n123$9lq$1@dough.gmane.org>
References: <j8kfav$csp$1 AT dough DOT gmane DOT org>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:6.0.1) Gecko/20110830 Thunderbird/6.0.1
In-Reply-To: <j8kfav$csp$1@dough.gmane.org>
X-IsSubscribed: yes
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Precedence: bulk
List-Id: <cygwin.cygwin.com>
List-Unsubscribe: <mailto:cygwin-unsubscribe-archive-cygwin=delorie DOT com AT cygwin DOT com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Note-from-DJ: This may be spam

30.10.2011 23:24, Oleksandr Gavenko пишет:
> I have problem with permission (files stand non-readable sometimes) on
> host when "rsync" or "hg clone/pull" done on external drive
> on another host.
>
> I read http://www.cygwin.com/cygwin-ug-net/ntsec.html
> partially understand text but don't know how to resolve
> my problem...
>
>  From manual:
>
> To use Windows security correctly, Cygwin depends on the files
> /etc/passwd and /etc/group
>
> So if I carry external storage from one host to another
> does second Cygwin stop understand permission on external storage
> correctly?
>
> I would like to see if all Cygwin operation set 666 permission
> for files and 777 for directories for external drive and
> don't set any host specific owners so I always can access to files.
>
> It is possible that Cygwin set owners only from well knows SIDs?
> Like S-1-1-0 (everyone), S-1-5-32-544 (Administrators)
> so this IDs valid on any Windows host.
>
Summarise: We have Cygwin permission model and external storage
that moved from hist place to another (very frequent like any
flash drive...).

   $ cd /cygdrive/h
   $ umask 0000
   $ rsync -av --no-g --no-p --chmod=ugo=rwX --delete ~/tmp/forth/ forth/
   ...
   $ cd forth/
   $ ls -l
-rw-rw-rw-  1 user passwd/group_GID_clash(513/10513) 98575 июн  8  2008 
buzzard.2
   ....
   $ icacls buzzard.2
icacls buzzard.2
buzzard.2 desktop\user:(R,W,D,WDAC,WO)
           desktop\None:(R,W)
           All:(R,W)

If I move drive to another host I got:

   permission denied
   invalid descriptor

that come from 'desktop\user' and 'desktop\None'.

Some times I can not ever browse file hierarchy on another host...

But seems that this is Windows 7 problem as same happen
if use Explorer for file coping.

I partially can resolve problem. So I able fix permission but
this take 15 min of script job...

Put 'uac.js' and 'uac.bat' to root of your drive and run 'uac.js'
which ask for admin permission and invoke 'uac.bat' for taking
ownership and granting full access to all:

   $ cat uac.bat
cd %1
takeown /r /f %1
icacls %1 /grant:r *S-1-1-0:(f) /t /c
pause

   $ cat uac.js
var fso = new ActiveXObject("Scripting.FileSystemObject");
var curdir = fso.GetParentFolderName(WScript.ScriptFullName);
var objShell = new ActiveXObject("shell.application");
objShell.ShellExecute("uac.bat", curdir, "", "runas", 1);

>
> Is it right to update /etc/fstab to:
>
> h: /cygdrive/h ntfs binary,noacl,user 0 0
>
> How can I set umask? In .bashrc? What if I run
> Cygwin program from cmd?
>
This question is open...


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple