X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=GzI4rRQuZIoJE9jAwp0bMLKLskddtPie4ovrukjitLQhxHy/sMlfX
	l7ZmVR73hOHLq9q7vf2eEgxg/H0ONZYnDifrl/9nnvED3uDhDEis+R1H4vDib+S+
	eD02S8+Vkpig+9JT/nBEguJJwfrOCAmAdQ6BDno5NKs6sreAsI7/mE=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	 bh=9NSjZIuZG605Vky3CHqbZyBwDac=; b=aB3BXvNPhhsDq8KVieA1q4VCj8ZH
	glTqfOnUaWaBv8UNGP9ybpdKlqQmFjNnhwScy7yEJsgH3hY2cv38C9Q4UbwIR0ER
	NAOyRCItWuuU+NSOK8DgPn8AtHs25Fii1XNQ6mn6z1Iom7tcEUQyyhmOe3z6MHoD
	wY9nBTaMBhk76ik=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-4.5 required=5.0 tests=AWL,BAYES_20,KAM_LAZY_DOMAIN_SECURITY autolearn=no version=3.3.2
X-HELO: calimero.vinschen.de
Date: Sun, 29 Nov 2015 13:59:21 +0100
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: [ANNOUNCEMENT] TEST RELEASE: Cygwin 2.4.0-0.4
Message-ID: <20151129125921.GA2755@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <announce DOT 20151121162447 DOT GF2755 AT calimero DOT vinschen DOT de> <CABPLASTKt3uKcAbeLNjVa89wrWi_LO6MnPD0Fd=T0FxJG0r5mA AT mail DOT gmail DOT com> <20151126131633 DOT GL2755 AT calimero DOT vinschen DOT de> <CABPLASTpsNA4vGtONb14dQ87UV1gY=UAeHBgEXUmgztDeny_mg AT mail DOT gmail DOT com> <CABPLASRpe+ey=dzuzkKYhu4UV=A10y9RkOzLxxA7v4o5CPtSag AT mail DOT gmail DOT com> <20151128155421 DOT GX2755 AT calimero DOT vinschen DOT de> <CABPLASSAabDkMK8ZwF0Q+a1N7enDW5SwuPu3_rnAFNdNZqfXmw AT mail DOT gmail DOT com> <1352387525 DOT 20151129021637 AT yandex DOT ru>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;	protocol="application/pgp-signature"; boundary="iBHcHRCIarfY7C0j"
Content-Disposition: inline
In-Reply-To: <1352387525.20151129021637@yandex.ru>
User-Agent: Mutt/1.5.23 (2014-03-12)

--iBHcHRCIarfY7C0j
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Nov 29 02:16, Andrey Repin wrote:
> Greetings, Kacper Michajlow!
>=20
> >> Please also attach the output of `id' and of `getfacl . test test/test=
'.
>=20
> > getfacl attached. `id` output is already in cygcheck.log
>=20
> > In getfacl output this line `default:group:1001 <unknown>:r-x` looks
>=20
> Uh-oh.
> Do you, by any chance, have /etc/passwd file?
> Or a user comment changing relevant information?

I agree with Andrey here: Uh oh!

The mkdir trace contains a suspicious snippet which is the reason
the mkdir call doesn't manage to post-process the ACL:

  [...] pwdgrp::fetch_account_from_windows: LookupAccountSidW (S-1-5-32-100=
1), Win32 error 1332
  [...] /[...]/security.cc:337 status 0xC0000078 -> windows error 1337

Status 0xC0000078 aka Win32 error 1337 means "invalid SID".  And the
SID 1-5-32-1001 is in fact invalid.  The S-1-5-32 prefix denotes a builtin
account, but the RID 1001 is invalid for a builtin group.  1001 is the
RID of your user account, though, but that would be prefixed by the SID
of your machine, which looks like S-1-5-21-XXXXXXXX-YYYYYYYY-ZZZZZZZZ.
I don't see how this broken SID came into life, unless your /etc/passwd
and/or /etc/group files are broken (hand edited perhaps?).

You're aware that you don't need the /etc/passwd and /etc/group files
anymore, aren't you?  https://cygwin.com/cygwin-ug-net/ntsec.html

For testing I'd like you to do the following:

- Edit /etc/nsswitch,conf and change the "passwd:" and "group:" lines
  to omit checking the passwd and group files:

    passwd: db
    group: db

- Exit all Cygwin processes and restart a shell.

- Call `id' again and attach it to your reply.  The uids and gids of
  your account and primary group should be different now.

- Remove the test dir, call `mkdir -p test/test' and call icacls on test
  and test/test.

- Try chmod 755 test/test again.

- Also, would you mind to attach your /etc/passwd, /etc/group and
  /etc/nsswitch.conf files to your reply?


Thanks,
Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--iBHcHRCIarfY7C0j
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=Lb8G
-----END PGP SIGNATURE-----

--iBHcHRCIarfY7C0j--