DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=MHIUgYMpP4L6ae6dD+eeJRl6uEW9fgmGHd48jCE07oyMHY9S6M51J
	iUmdDAN2t8OpbTB2ZYVeKZu401YHNHYllcAHC6Zyzbi7QDEUf/Bis8P1H0bBwW7w
	QHyfeVCOqZDS4vPwOgz4F9I3WbPd9B4FRbGKH6H6RO3vLoeecOpyzY=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Date: Mon, 10 Mar 2014 19:13:39 +0100
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: Testers needed:  New passwd/group handling in Cygwin
Message-ID: <20140310181339.GF28681@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <20140213143849 DOT GH2246 AT calimero DOT vinschen DOT de> <87fvn7cb68 DOT fsf AT Rainer DOT invalid> <20140225200414 DOT GA4238 AT calimero DOT vinschen DOT de> <loom DOT 20140310T181432-804 AT post DOT gmane DOT org>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;	protocol="application/pgp-signature"; boundary="GID0FwUMdk1T2AWN"
Content-Disposition: inline
In-Reply-To: <loom.20140310T181432-804@post.gmane.org>
User-Agent: Mutt/1.5.21 (2010-09-15)

--GID0FwUMdk1T2AWN
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mar 10 17:19, Achim Gratz wrote:
> Corinna Vinschen <corinna-cygwin <at> cygwin.com> writes:
> > The fact that the shells are doing it right seems to indicate that this
> > isn't a generic problem.  I can't debug this, though.  Can you see if
> > you can figure out what's going on under the hood?  Does strace show
> > anything of interest?  Can we perhaps set up some joint debugging via
> > private mail during the next couple of days?
>=20
> Perl goes through stat64 that seems to explicitly check the ACL while sh
> uses a different codepath.  I don't see anything obviously wrong with eit=
her
> trace.  If I set up cygdrive to use the noacl option the problem goes awa=
y,
> apparently because the ACL check never takes place within stat64.
>=20
>   869 2501512 [main] perl 2604 stat64: entering
>   814 2502326 [main] perl 2604 normalize_posix_path: src x86
>   802 2503128 [main] perl 2604 cwdstuff::get: posix /cygdrive/x/install
>  1195 2504323 [main] perl 2604 cwdstuff::get: (/cygdrive/x/install) =3D
> cwdstuff::get (0x80000008, 32768, 1, 0), errno 0
>   810 2505133 [main] perl 2604 normalize_posix_path: /cygdrive/x/install/=
x86
> =3D normalize_posix_path (x86)
>  1195 2506328 [main] perl 2604 mount_info::conv_to_win32_path:
> conv_to_win32_path (/cygdrive/x/install/x86)
>   810 2507138 [main] perl 2604 mount_info::cygdrive_win32_path: src
> '/cygdrive/x/install/x86', dst 'X:\install\x86'
>   837 2507975 [main] perl 2604 set_flags: flags: binary (0x2)
>   810 2508785 [main] perl 2604 mount_info::conv_to_win32_path: src_path
> /cygdrive/x/install/x86, dst X:\install\x86, flags 0x4022, rc 0
>  3329 2512114 [main] perl 2604 symlink_info::check: 0x0 =3D NtCreateFile
> (\??\X:\install\x86)
>  2816 2514930 [main] perl 2604 symlink_info::check: not a symlink
>   845 2515775 [main] perl 2604 symlink_info::check: 0 =3D
> symlink.check(X:\install\x86, 0x289888) (0x404022)
>   839 2516614 [main] perl 2604 path_conv::check: this->path(X:\install\x8=
6),
> has_acls(1)
>   828 2517442 [main] perl 2604 build_fh_pc: fh 0x612DD5A0, dev 000000C3
>   816 2518258 [main] perl 2604 stat_worker: (\??\X:\install\x86, 0x800390=
D0,
> 0x612DD5A0), file_attributes 16
>  1603 2519861 [main] perl 2604 cygpsid::debug_print: get_sids_info: owner
> SID =3D S-1-5-21-2052111302-842925246-682003330-75441
>   818 2520679 [main] perl 2604 cygpsid::debug_print: get_sids_info: group
> SID =3D S-1-5-21-2052111302-842925246-682003330-513
>   818 2521497 [main] perl 2604 get_info_from_sd: ACL 0x4000, uid 75441, g=
id
> 10513
>   875 2522372 [main] perl 2604 fhandler_base::fstat_helper: 0 =3D fstat
> (\??\X:\install\x86, 0x800390D0) st_size=3D0, st_mode=3D0x4000, st_ino=3D=
-197262732544
                                              ^^^^^^^^^^^^^^
This is the important snippet, but I don't see how this could have been
different before my patches.  The mode is S_IFDIR and 000 permissions.

That usually means:

- The owner of the file, here S-1-5-21-2052111302-842925246-682003330-75441,
  has no ACCESS_ALLOWED_ACE in the ACL, or the owner has no FILE_READ_DATA,
  FILE_WRITE_DATA, and FILE_EXECUTE permissions on the file.

- The group of the file, here S-1-5-21-2052111302-842925246-682003330-513
  (Domain Users, apparently) has no ACCESS_ALLOWED_ACE in the ACL, or
  the owner has no FILE_READ_DATA, FILE_WRITE_DATA, and FILE_EXECUTE
  permissions on the file.

- The Everyone group S-1-1-0 has no ACCESS_ALLOWED_ACE in the ACL, or
  the owner has no FILE_READ_DATA, FILE_WRITE_DATA, and FILE_EXECUTE
  permissions on the file.

This stuff is entirely independent of the new passwd/group code, unless
the owner and group are Samba Unix Users/Groups (S-1-22-[...]), in which
case I made some changes in this area on 2014-02-27.

The uid and gid values point to the fact that you're still using a
passwd and group file.  How are your /etc/nsswitch.conf settings and
does switching to db-only make a difference?


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--GID0FwUMdk1T2AWN
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=WZsa
-----END PGP SIGNATURE-----

--GID0FwUMdk1T2AWN--