X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=wyciQutql/DMKmlGjpIbQMo5IOmquiiDKx94hPUVlGHAR9jyUk2HJ
	sfodAP1BVPuvGvqB5+vatvw9XJ7HniyrEWBJuHw898KKvf/2KPkWpAatsuEiTrih
	RlzcOYezl0llVIwwaDqN3c4Jvi1DXzYV0D52EgG9sbciLS9LwT+qwM=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	 bh=GnnJFrP4Caxj3zI8WUzHBP7/1oA=; b=q4hphwBKrjotLam2ACt2Knp3AFMj
	8w0Mc+tD/Nuy7OUHOU6fVigighq8vLMSSbWPZcYcwY7pBw9piFMyBsAs3GaQ/3fT
	E1fjQeGBdXSeaqSx1X4YRc2r7S3KN+H1zpzytahmp4Rk2MOIM1HOYhu6mSKdZUAN
	4UTWR3ujJUkNEYM=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-5.9 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=3.3.2
X-HELO: calimero.vinschen.de
Date: Fri, 29 Aug 2014 13:09:38 +0200
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: (call-process ...) hangs in emacs
Message-ID: <20140829110938.GD20700@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <87wq9v9j2y DOT fsf AT Rainer DOT invalid> <53FD0662 DOT 5050208 AT cornell DOT edu> <20140827084245 DOT GD20700 AT calimero DOT vinschen DOT de> <53FDD4A8 DOT 5050401 AT cornell DOT edu> <loom DOT 20140827T170804-533 AT post DOT gmane DOT org> <loom DOT 20140828T085927-71 AT post DOT gmane DOT org> <20140828095524 DOT GO20700 AT calimero DOT vinschen DOT de> <20140828131832 DOT GT20700 AT calimero DOT vinschen DOT de> <loom DOT 20140828T172529-396 AT post DOT gmane DOT org> <loom DOT 20140829T115632-276 AT post DOT gmane DOT org>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;	protocol="application/pgp-signature"; boundary="p1zSJVlfBL7BTggM"
Content-Disposition: inline
In-Reply-To: <loom.20140829T115632-276@post.gmane.org>
User-Agent: Mutt/1.5.23 (2014-03-12)

--p1zSJVlfBL7BTggM
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Aug 29 09:58, Achim Gratz wrote:
> Achim Gratz <Stromeko <at> NexGo.DE> writes:
> > > Please test.
> >=20
> > This fixes the "read-only" problem in Emacs (so that hunch was correct)=
.=20
> > Perl still doesn't play, but I think the 5.18 version should get it cor=
rect.
> > Will need to switch a test installation over for that, though.
>=20
> With that snapshot in place, ssh suddenly recognized that my private key
> file was more readable than it liked it to be, so it looks that it's using
> the same general strategy of dealing with ACL as Emacs.

...which means, they don't deal with ACLs at all.  They only see what's
given in the st_mode permission bits.  With this change, the group
permission bits now show that *somebody* has certain permissions on the
file, thus the group permissions indicate a too open access for ssh, if
somebody except you have write access to the file.

Downside: If you use inherited Windows permissions, you'll often have
the case that Administrators and/or SYSTEM have full access to your
files.  This in turn shows up as rwx group permissions now.  If you
can't change the permissions (company requirements, etc) the ssh key
file permission test will get annoying.

So it's probably a very nice change (thanks a lot for bringing this up!),
but it will probably have some negative side-effects for existing
installations.

> I'm starting to
> like this patch very much... :-)

Despite of what I'm outlining above, me too :)


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--p1zSJVlfBL7BTggM
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=hjZQ
-----END PGP SIGNATURE-----

--p1zSJVlfBL7BTggM--