DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=l3VseD4gf1K5rW4UsV6KrGr7sOczz6RLurY1EdVCeVlCyN38FMIk4
	rpirH+qZDNh4zGblVPAVmujWPQQCdtCgkQyO+UD9Aguy2LgbIy3vH/KTxFHfC38A
	tw6bG9HPu8VuDB22GLHM0kTsA1jJbV2mPRdhA2XnWD5EtZ4JIi+i0k=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Date: Sun, 12 Apr 2015 10:35:32 +0200
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: [TESTERS needed] New POSIX permission handling
Message-ID: <20150412083532.GM7343@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <20150410100703 DOT GA4401 AT calimero DOT vinschen DOT de> <1428772308972-117455 DOT post AT n5 DOT nabble DOT com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;	protocol="application/pgp-signature"; boundary="0FRtVia6Q6lt+M0P"
Content-Disposition: inline
In-Reply-To: <1428772308972-117455.post@n5.nabble.com>
User-Agent: Mutt/1.5.23 (2014-03-12)

--0FRtVia6Q6lt+M0P
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Apr 11 10:11, donmez wrote:
> Hi,
>=20
>=20
> Corinna Vinschen-2 wrote
> > Hi folks,
> >=20
> >=20
> > I just applied a patch I'm working on for quite some time now.  As I
> > outlined before on this list, the POSIX permission handling has aged
> > considerably and, for historical reasons, did things differently
> > dependent on the calling function.  I took the time to reimplement the
> > core functionality to handle all ACLs as strictly following POSIX ACL
> > rules as possible.
>=20
> I tested the updated package and at least quilt and mutt seems to broken =
by
> the permission changes:
>=20
> [~]> quilt new foo
> cat: /tmp/quilt.mwTVWM: Permission denied
> Patch patches/foo is now on top
>=20
> And running mutt results in:
>=20
> "Error creating temporary file /tmp/mutt-...."
>=20
> Rolling back to an older snapshot fixes the problem.

Thanks, but...=20

No offense, but this is not overly helpful.  The problem is to learn
*why* this happens and how to fix it.  For that I'd need to know what
your permissions on /tmp look like (ls -l, getfacl, icacls).  Creating
files in my /tmp (having an old-style ACL) with the following
permissions works as desired for me:

  $ uname -rm
  2.0.0(0.287/5/3) x86_64
  $ ls -ld /tmp
  drwxrwxrwt+ 1 corinna vinschen 0 Apr 12 10:25 /tmp
  $ getfacl /tmp
  # file: /tmp
  # owner: corinna
  # group: vinschen
  # flags: --t
  user::rwx
  group::rwx
  mask:rwx
  other:rwx
  default:user::rwx
  default:group::r-x
  default:mask:r-x
  default:other:r-x

  $ icacls C:\\cygwin64\\tmp
  C:\cygwin64\tmp VINSCHEN\corinna:(F)
		  VINSCHEN\vinschen:(RX,W)
		  Everyone:(RX,W)
		  NULL SID:(RD)
		  CREATOR OWNER:(OI)(CI)(IO)(F)
		  CREATOR GROUP:(OI)(CI)(IO)(RX)
		  Everyone:(OI)(CI)(IO)(RX)

  Successfully processed 1 files; Failed processing 0 files
  $ touch /tmp/foo
  $ ls -l /tmp/foo
  -rw-r--r-- 1 corinna vinschen 0 Apr 12 10:25 /tmp/foo
  $ getfacl /tmp/foo
  # file: /tmp/foo
  # owner: corinna
  # group: vinschen
  user::rw-
  group::r-x
  mask:r--
  other:r--

  $ icacls C:\\cygwin64\\tmp\\foo
  C:\cygwin64\tmp\foo NULL SID:(DENY)(Rc,S,X,DC)
		      VINSCHEN\corinna:(R,W,D,WDAC,WO)
		      VINSCHEN\vinschen:(DENY)(S,X)
		      VINSCHEN\vinschen:(RX)
		      Everyone:(R)

  Successfully processed 1 files; Failed processing 0 files
  $


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--0FRtVia6Q6lt+M0P
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=Xxfe
-----END PGP SIGNATURE-----

--0FRtVia6Q6lt+M0P--