X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:to:from:subject:date:message-id:references
	:mime-version:content-type:content-transfer-encoding; q=dns; s=
	default; b=RHZl5VhqR6L395ZJJmEomZzp9u+Rj62NCwivKPGD0fr3/57AJYinh
	uPkWMmW72Fn7JPFT2jqM30u+HWq0oLpsPjMCtGcbT4tEwscrdzRRpIsNCsZTrWxE
	Olj9R6TEfW2AXCaU5AOKWFgCZTbmCD+7jupnfMT00SPQ5JFvR/b7pg=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:to:from:subject:date:message-id:references
	:mime-version:content-type:content-transfer-encoding; s=default;
	 bh=QTiql1/oyiw+PIYRn2A9Yc9V6wY=; b=e3dGwF8YrITCDsQs3aBIxESGlQnf
	BunF9MZ5YLiZAiBxWzVOof1qCtRkrK6gJPMDtu85NbgmB5jQRNWomVqW/SZm17mM
	2bj/KfgkUkkhs7MRzAEjeZA/DpDwYUx/XDyziiX0RS4eb6r2pB4mKB1XFpMfu4TE
	C6G4eSetysYi800=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-4.8 required=5.0 tests=AWL,BAYES_40,RCVD_IN_DNSWL_LOW,RCVD_NUMERIC_HELO,SPF_HELO_PASS,SPF_PASS,T_FSL_HELO_BARE_IP_2,T_RP_MATCHES_RCVD autolearn=no version=3.3.2
X-HELO: plane.gmane.org
To: cygwin AT cygwin DOT com
From: Achim Gratz <Stromeko AT NexGo DOT DE>
Subject: Re: [ANNOUNCEMENT] Updated: Cygwin 1.7.35-1
Date: Fri, 6 Mar 2015 12:51:10 +0000 (UTC)
Lines: 17
Message-ID: <loom.20150306T134526-167@post.gmane.org>
References: <announce DOT 20150304112636 DOT GI3213 AT calimero DOT vinschen DOT de>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
User-Agent: Loom/3.14 (http://gmane.org/)
X-IsSubscribed: yes

Corinna Vinschen <corinna-cygwin <at> cygwin.com> writes:
> - Change handling of group permissions if owner SID == group SID.  Now the
>   group permissions don't mirror the user permissions anymore, thus leading
>   to less hassle with security-conscious applications.

There's another tricky situation that is not yet handled:

If the file is owned by myself and I'm in a group that allows full access
(but not ACL modifications), Cygwin will show that file as having mode
"---rwx---+".  Applications that follow POSIX semantics will interpret that
file as unreadable by the owner (==current user) and skip checking the group
permissions, while NTFS will still happily grant that access.  So in that
situation the group permissions need to be promoted to the owner permissions.


Regards,
Achim.fare


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple