DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:date:message-id:subject:from:to
	:content-type; q=dns; s=default; b=ehwIghSgeBC88Qtj4NQixSulQ3Lg3
	sQMJRXvMEvWCIEG9S4ZsKWdvnA3ZWTWrstvtzdKBzHBRvkdyb1WAqlhz2Elel++X
	R5zUGr6V0167pBGz2vQeA9fVaMv48C/YuwvBUFzSncmjdWzOuEBXUBn1jYLH6gvD
	uA9HEAhj/0eiuE=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
MIME-Version: 1.0
Date: Tue, 12 May 2015 21:02:46 +0200
Message-ID: <CAHODtZTiAbrFLBfgcY=RNathFpi70P8LxQwQ2_sVWM=x7nZvpg@mail.gmail.com>
Subject: Problem with posix flags and permission denied on domain computer
From: =?UTF-8?B?SmnFmcOtIEVuZ2VsdGhhbGVy?= <engycz AT gmail DOT com>
To: cygwin AT cygwin DOT com
Content-Type: text/plain; charset=UTF-8

I have problem with posix file flags and permission denied on computer
which is in domain. I have file on disk D: named foo. It is accessible
both in Windows and in Cygwin as /cygdrive/d/foo but has flags
----rwx---+. If I copy this file to file named bar, it is not
accessible in Cygwin nor in Windows.
Fresh Windows installation, fresh Cygwin 2.0.2-1, foo file created in
notepad. As user engycz I'm member of group "NT
AUTHORITY\Authenticated Users" and "BUILTIN\Users" so I have R/W
access to foo.

$ ls -al foo
----rwx---+ 1 engycz Domain Users 5 12. 5  20.15 foo

$ cat foo
hello

$ getfacl.exe foo
# file: foo
# owner: engycz
# group: Domain Users
user::---
group::---
group:Authenticated Users:rwx
group:SYSTEM:rwx
group:Administrators:rwx
group:Users:r-x
mask:rwx
other:---

$ icacls.exe foo
foo BUILTIN\Administrators:(I)(F)
    NT AUTHORITY\SYSTEM:(I)(F)
    NT AUTHORITY\Authenticated Users:(I)(M)
    BUILTIN\Users:(I)(RX)

====================
$ cp foo bar
====================

$ ls -al bar
----rwx---+ 1 engycz Domain Users 5 12. 5  20.18 bar

$ cat bar
cat: bar: Permission denied


$ getfacl.exe bar
# file: bar
# owner: engycz
# group: Domain Users
user::---
group::r-x
group:Authenticated Users:rwx
group:SYSTEM:rwx
group:Administrators:rwx
group:Users:r-x
mask:rwx
other:---

$ icacls.exe bar
bar DOM_LAN\engycz:(DENY)(S,RD,REA,X)
    DOM_LAN\engycz:(D,Rc,WDAC,WO,RA,WA)
    DOM_LAN\Domain Users:(RX)
    Everyone:(Rc,S,RA)
    BUILTIN\Administrators:(F)
    NT AUTHORITY\SYSTEM:(F)
    NT AUTHORITY\Authenticated Users:(M)
    BUILTIN\Users:(RX)

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple