X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=G0ER/Xf6WR8jjklbSe851jmNs63tmYrXOMijfwtu4e+GTl0nCKN4E
	DwAifjzsXU6x8IbiF4Fj+wjOGESSz+wDq4sP42XnR2Z1c/DkjIhWosG5wMPlNgkQ
	GAwmLMVMWYqOFSDlYKlIpk+jGcQto5ciV8oTfcoXI0SuMIPGcJXLEc=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	 bh=N1tMmV2+Z7BnE6D5Kyf8zngWBIU=; b=T2QKU7wK9lwtFKd53SMmL4dYBCrW
	Ten8UJmAZSz60BZh0igr8JZX1Qvzqv3prdqDB8xt+XbgoljCyhDZt6luisLBSAxN
	YbwxEJhtBzogJQGZJEiZrawK4T2VEoWH9ziVqjvtXCgcBQ+DDPr9Yx31drJ2D265
	y4NC1HLpv7UgZK8=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-101.9 required=5.0 tests=AWL,BAYES_50,KAM_LAZY_DOMAIN_SECURITY,RCVD_IN_PBL,RDNS_DYNAMIC,USER_IN_WHITELIST autolearn=no version=3.3.2 spammy=setfacl, perms, rx, Wolff
X-HELO: calimero.vinschen.de
Date: Fri, 18 Dec 2015 20:38:29 +0100
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: setfacl to remove a permission implicit adds another
Message-ID: <20151218193829.GR3507@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <5674265F DOT 2040902 AT towo DOT net> <567430CD DOT 1020801 AT towo DOT net> <20151218171150 DOT GP3507 AT calimero DOT vinschen DOT de>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;	protocol="application/pgp-signature"; boundary="p8BcnzLwh3ipgLRM"
Content-Disposition: inline
In-Reply-To: <20151218171150.GP3507@calimero.vinschen.de>
User-Agent: Mutt/1.5.23 (2014-03-12)

--p8BcnzLwh3ipgLRM
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Dec 18 18:11, Corinna Vinschen wrote:
> On Dec 18 17:14, Thomas Wolff wrote:
> > I wrote:
> > >...
> > >After removing SYSTEM write permission with setfacl,
> > >it was effectively removed for SYSTEM but the other groups got
> > >write permission ADDED instead (as also properly indicated by ls) =E2=
=88=92
> > >which is kind of the opposite of the intended operation.
> > cygwin-2.4.0-0.11, sorry
>=20
> In that case the behaviour is by design.  Try the same on Linux and the
> result will be the same.  Every time you change group perms, the mask
> will be changed to reflect the maximum permissions given to any group or
> seccondary user.  You always have to check the mask or set it explicitely
> to the desired value.

I'm sorry, but I forgot to mention an important part:  Recomputing the
mask is *not* done in the kernel or, in our case, Cygwin.  Rather this
functionality is part of the setfacl tool.  Setfacl recomputes the mask
by default.  There's a new option -n/--no-mask as on Linux to retain the
current mask setting, e.g.

  $ setfacl -n -m g:wheel:r-x file

Try setfacl --help for a comprehensive description of all options.


HTH,
Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--p8BcnzLwh3ipgLRM
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=pRqe
-----END PGP SIGNATURE-----

--p8BcnzLwh3ipgLRM--