X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:reply-to:message-id:to:subject
	:in-reply-to:references:mime-version:content-type
	:content-transfer-encoding; q=dns; s=default; b=ZPsnqOq1Z8KvxRZe
	rglRNuiEeI37S7KQsHVeoQqaFBCmgR5onQF76uU3DaYyiMbWEPw5hT6vMAZc9nPx
	k8GpO7zWPbnYWcJRE7aqaS6Zuz8bd+k+ezh4E9oicME+Q/BvHtbmaZEZtnU+HN8b
	bRhJ32r+updCxaXClLBGwsvJ+bs=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:reply-to:message-id:to:subject
	:in-reply-to:references:mime-version:content-type
	:content-transfer-encoding; s=default; bh=x/Yf1G5s1HCeCdhkNNxDHf
	eLTSA=; b=p1mvMRHbOEpQJTjDMcLd2yZ/7Ms4UguAh5KGvam7KoSARCHWc28mC1
	geFlK/AGUlJKRWWRf3czUwLPJEDW3Bfk8ziH2dAfcsrhYKqrIICtQV1aYMRdbgLJ
	iOr8OJxm2SYbBZSmEfsiYp8D8bhiVVYG3FvZYdO5wWnz4wotA4zPQ=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=2.0 required=5.0 tests=AWL,BAYES_60,FREEMAIL_FROM,KAM_BODY_URIBL_PCCC,KAM_FROM_URIBL_PCCC,KAM_THEBAT,SPF_SOFTFAIL autolearn=no version=3.3.2
X-HELO: smtp.ht-systems.ru
Date: Thu, 26 Feb 2015 22:51:18 +0300
From: Andrey Repin <anrdaemon AT yandex DOT ru>
Reply-To: cygwin AT cygwin DOT com
Message-ID: <661484179.20150226225118@yandex.ru>
To: Bryan Berns <bryan DOT berns AT gmail DOT com>, cygwin AT cygwin DOT com
Subject: Re: Too Many Permissions Stripped In 1.7.35?
In-Reply-To: <CADi7v6JajieaQGq3N5LY2Ck2m7SiOTci6au5t7RL4gxZdvBgEw@mail.gmail.com>
References: <CADi7v6JajieaQGq3N5LY2Ck2m7SiOTci6au5t7RL4gxZdvBgEw AT mail DOT gmail DOT com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-IsSubscribed: yes

Greetings, Bryan Berns!

> I honestly haven't read up exactly how Cygwin interprets NTFS
> ACL/ACEs, but I remember seeing on the mailing list that a change was
> made in 1.7.35 was made to permission handling.  It is preferable in
> my organization that the SYSTEM account always have full control the
> local file system.

Then mount filesystem noacl (except core Cygwin stuff).
POSIX permissions are VERY special kind for Windows, and not always the best
idea to try.

> When using chmod under 1.7.35, it looks like
> permissions for SYSTEM get stripped (as well as some others).  Is this
> the desired behavior?  If so, I'll workaround it somehow but just
> wanted to verify before we release this much anticipated Active
> Directory optimized version.  For context, I'm running as the default
> Domain Administrator on a fresh install of Windows 8.1.

> @@@@@@ Testing With 1.7.34 @@@@@@

> $ uname -a
> CYGWIN_NT-6.3 BERNS-WINDOWS 1.7.34(0.285/5/3) 2015-02-04 12:14 x86_64 Cygwin

> $ mkdir TEST-34

> $ chmod 750 TEST-34

> $ icacls TEST-34
> TEST-34 DOMAIN\Administrator:(F)
>         DOMAIN\Domain Users:(RX)
>         Everyone:(Rc,S,RA)
>         BUILTIN\Administrators:(OI)(CI)(F)
>         NT AUTHORITY\SYSTEM:(OI)(CI)(F)
>         BUILTIN\Users:(OI)(CI)(RX)
>         NT AUTHORITY\Authenticated Users:(M)
>         NT AUTHORITY\Authenticated Users:(OI)(CI)(IO)(M)
>         CREATOR OWNER:(OI)(CI)(IO)(F)
>         CREATOR GROUP:(OI)(CI)(IO)(RX)
>         Everyone:(OI)(CI)(IO)(RX)
> Successfully processed 1 files; Failed processing 0 files

> @@@@@@ Testing With 1.7.35 @@@@@@

> $ uname -a
> CYGWIN_NT-6.3 BERNS-WINDOWS 1.7.35(0.286/5/3) 2015-02-25 13:13 x86_64 Cygwin

> $ mkdir TEST-35

> $ chmod 750 TEST-35

> $ icacls TEST-35
> TEST-35 DOMAIN\Administrator:(F)
>         DOMAIN\Domain Users:(RX)
>         Everyone:(Rc,S,RA)
>         BUILTIN\Administrators:(OI)(CI)(RX)
>         NT AUTHORITY\SYSTEM:(OI)(CI)(RX)
>         BUILTIN\Users:(OI)(CI)(RX)
>         NT AUTHORITY\Authenticated Users:(RX)
>         NT AUTHORITY\Authenticated Users:(OI)(CI)(IO)
>         CREATOR OWNER:(OI)(CI)(IO)(RX)
>         CREATOR GROUP:(OI)(CI)(IO)(RX)
>         Everyone:(OI)(CI)(IO)(RX)
> Successfully processed 1 files; Failed processing 0 files



--
WBR,
Andrey Repin (anrdaemon AT yandex DOT ru) 26.02.2015, <22:50>

Sorry for my terrible english...


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple