X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=q0sRMNdSjbwiYyxXVvZafDGMnSpN0UbEJ+h4q3CiCFENh7KPdtQ8S
	tqJUb5H8BuMmTtQVeRm9ht+0f4wYgSiG/QaFwv7LQmZmCiHl0UtFPA/K/GGPD4cV
	P+D7vi5SzWSiUUlkMk3VlzVXLJZngoESIkk1cnaU7O9lTb3ZX1Cl0k=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	 bh=6hWGDQgu+2nH5okxj03tdPz0Mi4=; b=kpLsx3ts7l9Xc7ybhGNgKwlOVkOu
	HSeeS8fNcFFvUPD68NZrSU8BWoRxz9/xKo1oCWrU3VauuqedTcI3NoXW6y9jE1ar
	06iwVOIF+BZP7fGyTr3+rvVon0b6ZJ5odewfmqw9571X7Y2tat/NsE5K1SYjIAvX
	Et2r2PVr9CSNKKk=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-4.7 required=5.0 tests=AWL,BAYES_05,KAM_LAZY_DOMAIN_SECURITY autolearn=no version=3.3.2
X-HELO: calimero.vinschen.de
Date: Mon, 13 Apr 2015 09:32:06 +0200
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: [ANNOUNCEMENT] TEST RELEASE: Cygwin 2.0.0-3
Message-ID: <20150413073206.GV7343@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <announce DOT 20150412191707 DOT GC1716 AT calimero DOT vinschen DOT de> <CADi7v6JaZ2RzZz8ndJHZE+YZYdTS7Xowe5Az85d7Qu1=YX8Scw AT mail DOT gmail DOT com> <20150413071750 DOT GU7343 AT calimero DOT vinschen DOT de>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;	protocol="application/pgp-signature"; boundary="f0Ums9VvOMUG7syy"
Content-Disposition: inline
In-Reply-To: <20150413071750.GU7343@calimero.vinschen.de>
User-Agent: Mutt/1.5.23 (2014-03-12)

--f0Ums9VvOMUG7syy
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Apr 13 09:17, Corinna Vinschen wrote:
> On Apr 12 17:19, Bryan Berns wrote:
> > On Sun, Apr 12, 2015 at 3:17 PM, Corinna Vinschen
> > <corinna-cygwin AT cygwin DOT com> wrote:
> > > Hi Cygwin friends and users,
> > >
> > >
> > > New 2.0.0-0.3 test release.  It's supposed to fix the pty chmod probl=
em
> > > reported in https://cygwin.com/ml/cygwin/2015-04/msg00240.html
> > >
> >=20
> > Just a note: In 2.0.0-0.2, creating a file using touch on the root of
> > one of my drives resulted in the with the Windows GUI Security tabs
> > complaining about ACE order on the resultant file.

I forgot to mention:  Yes, that's expected for some ACLs.  Cygwin tries
to minimize the number of DENY ACEs, but depending on the permissions
and the MASK value you end up with something like this:

  NULL DENY
  USER 1 DENY
  USER 2 DENY
  ...
  USER 1 ALLOW
  USER 2 ALLOW
  ...
  GROUP 1 DENY
  GROUP 2 DENY
  ...
  GROUP 1 ALLOW
  GROUP 2 ALLOW
  ...
  OTHER ALLOW

  Rinse and repeate with default (aka "inheritable") permissions.

This or some other, similar technique is required to reproduce POSIX
ACLs with Windows ACLs.  Don't let the Windows GUI reorder them to
generate the "canonical" (but incomplete) order.  This is along the
same lines as described in
https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-files


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--f0Ums9VvOMUG7syy
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=uMIi
-----END PGP SIGNATURE-----

--f0Ums9VvOMUG7syy--