DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=caQms0oT8tv5FA7xA7kI0tbcfzvvokFLFnWMWDrBihwSTfBxdqQO3
	InLOuX9byVyFUcf5ETNJz0sdRzgjaghB86r2qq9RzEPt9UieB+Xu3htkkh9qyhUL
	3B0Wcv2/93CInQJnuDbrGlwCWd+7dg4+/fw+ERKEM8QM3tG88qgZv8=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Date: Mon, 5 May 2014 16:47:45 +0200
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: Problem with "None" Group on Non-Domain Members
Message-ID: <20140505144745.GA6993@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <536796E4 DOT 2090009 AT breisch DOT org> <20140505135928 DOT GK30918 AT calimero DOT vinschen DOT de> <53679D5C DOT 5030209 AT breisch DOT org>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;	protocol="application/pgp-signature"; boundary="J2SCkAp4GZ/dPZZf"
Content-Disposition: inline
In-Reply-To: <53679D5C.5030209@breisch.org>
User-Agent: Mutt/1.5.21 (2010-09-15)

--J2SCkAp4GZ/dPZZf
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On May  5 10:17, Chris J. Breisch wrote:
> Corinna Vinschen wrote:
> >On May  5 09:49, Chris J. Breisch wrote:
> >As far as Cygwin tools are concerned, the None group is just a normal
> >group like any other group.  The behaviour you're observing looks a bit
> >like either your group file is not ok, or you're testing this with the
> >noacl mount option.  Or, probably more likely, you're suffereing from
> >the default ACL settings propagated from the parent directory.
> >
> >When Cygwin sets the POSIX permissions, it does exactly the same thing
> >for the primary group in your token, whether it's None or any other
> >group.
> >
> >
> I understand what you're saying, but I don't think the behavior
> agrees with your statements. I've tried this on a couple different
> machines, and the behavior is identical. No matter what I do, if a
> file is created with the "None" group, the group file permissions
> are always identical to the owner file permissions. I've tried
> playing with my umask and with directory sticky bits. It doesn't
> matter.

I wasn't talking about the POSIX permissions, but about the Windows
ACL.  In your current dir, what does `icacls .' print?  Maybe that
gives a clue.

> In the example above, my parent directory is rather oddly,
> Chris.Users 000. The current directory is Chris.None 775.

I just tried it myself with a local machine account and I can't
reproduce this.  My pgid is "None" and the umask of 0022 leads to the
expected POSIX permissions:

  vmbert8164+lcorinna AT vmbert8164 ~
  $ umask
  0022

  vmbert8164+lcorinna AT vmbert8164 ~
  $ touch bar

  vmbert8164+lcorinna AT vmbert8164 ~
  $ ls -l
  total 0
  -rw-r--r-- 1 vmbert8164+lcorinna vmbert8164+None 0 May  5 16:41 bar

> [...]
> Taking the example one step farther:
>=20
> $ chmod 600 bar
> $ ls -l bar
> -rw-rw---- 1 Chris None 0 May  5 10:10 bar
> $ chmod 400 bar
> $ ls -l bar
> -r--r----- 1 Chris None 0 May  5 10:10 bar

  vmbert8164+lcorinna AT vmbert8164 ~
  $ chmod 400 bar

  vmbert8164+lcorinna AT vmbert8164 ~
  $ ls -l bar
  -r-------- 1 vmbert8164+lcorinna vmbert8164+None 0 May  5 16:41 bar

So I'd say it's not a generic issue but something in your environment.
It would be nice to know what that is, of course.  Maybe there's some
security setting?!?


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--J2SCkAp4GZ/dPZZf
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=mB7P
-----END PGP SIGNATURE-----

--J2SCkAp4GZ/dPZZf--