DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:subject:to:references:from:message-id:date
	:mime-version:in-reply-to:content-type
	:content-transfer-encoding; q=dns; s=default; b=hMGfZPZTGdPJQqCM
	1ZiXIpaBKLDwYtPFJ4ChXwOADdbBvvoO77V8rRzLtxMTjQI+Uyw+CgwjmY/hWAys
	wWVGMFqVQGx+YeBoNDy07rqK3/yWe2ZoJBGZNiI69auYYp18IOrW7UNq6Z96v5M2
	p0tUK2ZuUmJ7QTwTD/x+ylVquN8=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Subject: Re: [ANNOUNCEMENT] TEST RELEASE: Cygwin 2.4.0-0.18
To: cygwin AT cygwin DOT com
References: <announce DOT 20160111193913 DOT GB2832 AT calimero DOT vinschen DOT de> <5695EC0F DOT 7010103 AT gmail DOT com> <20160113151249 DOT GM15034 AT calimero DOT vinschen DOT de>
From: random user <cnpxzsdwle4m0dkt AT gmail DOT com>
Message-ID: <5696B807.4030304@gmail.com>
Date: Wed, 13 Jan 2016 12:48:07 -0800
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.4.0
MIME-Version: 1.0
In-Reply-To: <20160113151249.GM15034@calimero.vinschen.de>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit

>> It's a bit late now to change how Cygwin constructs and evaluates ACLs.

Sorry, with the holidays and other issues it wasn't possible for me to
look at the test drops earlier.

Going production with a new Cygwin NTFS ACL layout incompatible with
NTFS-3g's already-existing layout would seem a long-term decision
regarding Cygwin <-> Linux interoperability.  Please consider.


On 01/13/2016 07:12 AM, Corinna Vinschen wrote:
> On Jan 12 22:17, random user wrote:
>> Something I wasn't aware of at the time of our prior discussion is
>> that the Linux NTFS-3g driver already supports Linux extended ACLs
>> on NTFS.  This is discussed at
>>  
>> http://www.tuxera.com/community/ntfs-3g-advanced/ownership-and-permissions/
>>
>> I explored taking a flash card back and forth between Cygwin
>> 2.4.0-0.18 and a Linux system, testing how each interprets what the
>> other wrote.
>>
>> I find they don't seem to interpret each other's per-group and mask
>> permission bits correctly when creating their Posix interpretation of
>> an NTFS ACL.
>>
>> I also find that somehow setting extended ACLs on Linux for a
>> directory is causing Cygwin to then see that object as a socket, if
>> I'm reading the below correctly. 'ls' on Cygwin won't descend into
>> that as it normally would for a directory,
>>   bash: cd: dir_acl: Not a directory
>> results when attempting to cd into it, etc.
>>
>> I don't know how common such uses are, but I do use both Cygwin and
>> Linux on the same flash cards and external disks.  If they are both
>> going to support Posix-style extended ACLs written to NTFS, it'd seem
>> nice if they could do so in compatible ways.
> Cygwin is trying to create an ACL with least possible entries while at
> the same time being POSIX compatible.  Apart from the NULL SID deny ACE
> to keep mask info and special bits, it's a pretty normal ACL.
>
> It's a bit late now to change how Cygwin constructs and evaluates ACLs.
> I'll take a look into the dir vs. socket thingy, but no guarantee that
> I can change that for 2.4.0.
>
>> bash 1 34 # ls -al
>> total 0
>> drwx------+ 1 sally sally 0 Jan 12 20:42 .
>> drwx------+ 1 sally sally 0 Jan 12 20:40 ..
>> srwxr-----+ 1 sally sally 0 Jan 12 20:42 dir_acl
>> -rwxr-----+ 1 sally sally 0 Jan 12 20:42 file_acl
>> -rw-------  1 sally sally 0 Jan 12 20:41 file_simple
> Weird.  The only way to set the filetype to socket is if the file is a
> Cygwin symlink (file with system DOS bit set and starting with the
> string "!<socket >".
>
>> [...]
>> bash 1 41 # getfacl dir_acl
>> # file: dir_acl
>> # owner: sally
>> # group: sally
>> user::rwx
>> group::---
>> group:julia:r--
>> mask:r--
>> other:---
>> default:user::rwx
>> default:group::---
>> default:other:---
>> [...]
>> bash 1 42 # icacls dir_acl
>> dir_acl CYGWIN\julia_ug:(NP)(DENY)(W,Rc,WO,X,DC)
>>         Everyone:(OI)(IO)(DENY)(S,X)
>>         CYGWIN\sally:(NP)(F)
>>         CYGWIN\julia_ug:(NP)(RX,W,DC)
>>         CYGWIN\sally_ug:(NP)(DENY)(W,Rc,WO,X,DC)
>>         Everyone:(NP)(Rc,S,REA,RA)
>>         CYGWIN\sally:(OI)(CI)(IO)(F)
>>         Everyone:(OI)(CI)(IO)(Rc,S,REA,RA)
> It will be hard to reproduce such an ACL.  It's just as non-standard as
> a Cygwin ACL, just differently so.  What bugs me is the deny ACE for
> sally_ug which looks pretty weird to me.
>
>
> Corinna
>


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple