X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:in-reply-to:references:date:subject
	:from:to:mime-version:content-type:content-transfer-encoding; q=
	dns; s=default; b=h2mby3nqqK5UUCa1ncXoe+2NMWyICDPjdQ+SCA/GaMRcNI
	BvE/o8O95NkBIqCgtXcCARWzc3vfk8olT/JQxUYHR/h+xvCOBnYu3AE1Cf5SEvMq
	d4Q+ZfZdVInkiX0uuws9/HRsD+cH7C6zZVByAuLKArac8Jzx7ZeWIhHZzru4s=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:in-reply-to:references:date:subject
	:from:to:mime-version:content-type:content-transfer-encoding; s=
	default; bh=2B6K5Lqyjwqcgult34waJt/veUQ=; b=uQ4x5gNQSQx3c+x9rKno
	Ri9iCDUaD5ubr4wZrXHQZYSA1jGAUZmUk4I6FxgP7zQCY5zat2i+ilW2GgwBpGNw
	2IB6SrTmJJvg3tIPgDzNyu2dM1s62dozYfH6+hqj+v7vZfipvuyOdqnqJPoYjiG2
	PKvar+SjycAMn8ignoCgG4M=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=0.9 required=5.0 tests=AWL,BAYES_50,KAM_LAZY_DOMAIN_SECURITY,RCVD_IN_DNSWL_NONE autolearn=no version=3.3.2
X-HELO: lb2-smtp-cloud6.xs4all.net
Message-ID: <0ff693d9c8109bdddf3d892d005678b7.squirrel@webmail.xs4all.nl>
In-Reply-To: <20150414085757.GC7343@calimero.vinschen.de>
References: <2bbd046b7e2ea40818416d8a6d3f15b8 DOT squirrel AT webmail DOT xs4all DOT nl>    <20150414085757 DOT GC7343 AT calimero DOT vinschen DOT de>
Date: Tue, 14 Apr 2015 16:18:27 +0200
Subject: Re: [ANNOUNCEMENT] TEST RELEASE: Cygwin 2.0.0-3
From: "Houder" <houder AT xs4all DOT nl>
To: cygwin AT cygwin DOT com
User-Agent: SquirrelMail/1.4.22
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-IsSubscribed: yes

> On Apr 13 18:10, Houder wrote:

>>  = Cygwin 2.0 -- logged on as user Test
>>
>> %% uname -a
>> CYGWIN_NT-6.1-WOW Seven 2.0.0(0.287/5/3) 2015-04-12 21:09 i686 Cygwin
>> %% pwd
>> /home/Test
>> %% id
>> uid=197614(Test) gid=197121(None) groups=197121(None), ... followed by irrelevant j.
>> 545(Users), 4(INTERACTIVE)66049(CONSOLE LOGON),11(Authenticated Users),15(This Organization),113(Local
>> acount),4095(CurrentSession),
>> 66048(LOCAL),262154(NTLM Authentication),401408(Medim Mandatory Level)
>> %% touch file
>> %% chmod 460 file
>> %% echo aha > file
>> bash: file: Permission denied
>>
>> %% getfacl file
>> # file: file
>> # owner: Test
>> # group: None
>> user::r--
>> group::r-x
>> mask:rw-
>
> Huh?  So it creates a mask even though it only contains standard POSIX
> permissions.  This explains the "permission denied".  The group r-x
> combined with a mask rw- results in effective r-- permissions for the
> group None.  This yet again calls for adding the output of effective
> permissions to getacl.

Now I am confused ...

Permission denied above (logon as user Test) did NOT surprise me ... It was
the 'write denial' after that (logon as user Henri).

>> %% id
>> uid=197608(Henri) gid=197121(None) groups=197121(None), ...
>> %% ls -l file
>> -r--rw---- 1 Test None 0 Apr 13 17:12 file
>> %% echo ho,ho > file
>> bash: file: Permission denied                           # Huh? No, no, no ...

User Henri should be able to write the file, should he not? At least, that is
what the output of 'ls' says, and according to what I demanded:

    chmod 460 file

(file is owned by user Test; 'None' is the primary group of user Henri)

Btw, I installed update 4 to Cygwin 2.0 ... and observe no change in the output
of getfacl, icacls ... also user Henri is still denied write access ...

Henri

> I think I fixed the thinko in the code.  At one point I noticed that I
> mishandled the GROUP_OBJ permssions in new-style ACEs and my fix was
> apparently a bit too efficient :}
>
> I uploaded new snapshots to https://cygwin.com/snapshots/ and I'm just
> uploading a 2.0.0-0.4 release.
>
> Please give either of them a try.
>
> Thanks,
> Corinna

=====


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple