DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:date:from:mime-version:to:subject
	:content-type:content-transfer-encoding; q=dns; s=default; b=gXo
	iDOgSBZCX6fK5csaLerD1CqrOGwW56g0HkgWCyID6/0LL67yHS16T05TFwiKYwIs
	E0EailCotp3XQFcOd3A2UtkeCimaZ3m5o7HgvrR69HhlcVJniwHKnRJ838Ls5UWU
	23HqVkF+v/AS0muUvtM5Y8YBBrqLbBNnYmQs/1xc=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Message-ID: <536796E4.2090009@breisch.org>
Date: Mon, 05 May 2014 09:49:24 -0400
From: "Chris J. Breisch" <chris DOT ml AT breisch DOT org>
User-Agent: Postbox 3.0.9 (Windows/20140128)
MIME-Version: 1.0
To: "cygwin AT cygwin DOT com" <cygwin AT cygwin DOT com>
Subject: Problem with "None" Group on Non-Domain Members
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Hi,

I noticed this over the weekend. It's probably working as designed, 
however. And may have even been noticed by others before.

As has been noted in the past, if your machine is not a Domain member, 
your account gets assigned to the "None" group. And it's your default 
group as well. The problem is that the "None" group isn't very well 
behaved when it comes to permissions.

Example below.

$ mkdir none-group-test
$ cd none-group-test/
$ touch foo
$ ls -l foo
-rw-rw-r-- 1 Chris None 0 May  5 09:35 foo
$ chmod 600 foo
$ ls -l foo
-rw-rw---- 1 Chris None 0 May  5 09:35 foo
$ chgrp Users foo
$ chmod 600 foo
$ ls -l foo
-rw------- 1 Chris Users 0 May  5 09:35 foo

When the group for a file or directory is set to "None", the group 
permissions always mimic the owner permissions. I assume this is nothing 
Cygwin has control over. But, this causes problems for programs like SSH 
which expect some of its files to be locked down and only owner 
accessible. Since "None" is the default group, this can be rather irksome.

As a workaround, I changed my default group in /etc/passwd from "None" 
(513) to "Users" (545). That worked fine.

However, I wonder two things:
1) Do we have to make "None" be the default group in a non-Domain 
environment? Is this something that could be set by mkpasswd? I realize 
this is a Windows Group and Cygwin is just doing what Windows tells it 
to do, but maybe that's not the best idea in this case.
2) How is this all going to work with Corinna's new stuff? Will I even 
be able to change my default group with it?

Just to be clear, this is only a problem on non-Domain accounts. For a 
Domain account the default group is "Domain Users" (513) rather than 
"None" (513), and "Domain Users" is well-behaved.

-- 
Chris J. Breisch

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple