X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:from:reply-to:subject:references:to:message-id
	:date:mime-version:in-reply-to:content-type
	:content-transfer-encoding; q=dns; s=default; b=muSaMtDkyN7cJUjm
	IQlD066jzIYq0pjORW+zr50ZQj1s9o5uJ6AZBpcrlGqWKgYsyROGVkJiH26k7h3y
	3PB8FgJrH4kb68LXdy7/GZ/OQ4R9AL8gaYIW7a1/VtpLjsus4kUtReW0ZUhY+wFF
	O1pvxMj8AtZFqWQ2V8+vrKfyRPg=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:from:reply-to:subject:references:to:message-id
	:date:mime-version:in-reply-to:content-type
	:content-transfer-encoding; s=default; bh=Z7qRxxGcaSO9oPy5yfhXcB
	3XfIg=; b=INlxr4UAI0+laEOcnXO/N6MHTvhTBfjGktMung1tXlm7tjO6D2vA8T
	bStr3cjr8Ce7wJCtMmf7MajodmtvPQleo2zp18UdmEiXwDR/8X5hEbyl2t2kUS5d
	5DeJh5qLy2u4IJ6Ug2/Ux55Z68y7lm+9/xLqT8fUieu8gb6jZe1E8=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-0.8 required=5.0 tests=AWL,BAYES_00,FREEMAIL_FROM,FREEMAIL_REPLYTO,RCVD_IN_DNSWL_NONE,SPF_PASS autolearn=no version=3.3.2 spammy=username, Hx-languages-length:938, perfect
X-HELO: mail-pf0-f182.google.com
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;        d=1e100.net; s=20161025;        h=x-gm-message-state:from:reply-to:subject:references:to:message-id         :date:user-agent:mime-version:in-reply-to:content-transfer-encoding;        bh=vK/5KYNZMfMCs0IidTzJr51k5S0mHV9UovJJUkskju8=;        b=kmPpFwt1RCXBMuJjL2F/Ee07/tiqIrMLI1jZk9O0Dd+qEi3eq5uRzWKRD13cvF7rWm         Cuw5NsXRw27nXOdXo6rvfSyx7ZJvDm8BL1JKQaV9R1sjl4bJzCETuotxluQiXjtB0xfu         5SYJ8aZKzr0l/AF93g7n8nQ60u6yY1VYwogCbztvfu9TrmodJfiIlQV+otkGXEjNLcI/         nga1XcUIUI/c+pq1hYPk0RulCdLNyBjIreuLTFBweuFd4TfRrmzQTyods5/9iEbX/woB         Ks/mhozQcCA/FG1DJOqwtEGWjRedGtYOhD6YzBtuovi/vqUWZDHXp3bUlCB62pHUst2A         FJig==
X-Gm-Message-State: AMCzsaUQPgIfMAfQlQm4S4StwlhdC3C8LvE4kIfM05ilfOhxw6ekBb6D	AFI53SgJQcDulMzJvKF3+Rjwk9Id
X-Google-Smtp-Source: ABhQp+Q1HaX9PQ341GY+jNRSkE+Lbu8128BCvg9QJFoEs4yAVzS8HCX4fhghOUceRVCqp3FYnNzu+Q==
X-Received: by 10.84.148.203 with SMTP id y11mr10082219plg.198.1509815742983;        Sat, 04 Nov 2017 10:15:42 -0700 (PDT)
From: "Matt D." <codespunk AT gmail DOT com>
X-Google-Original-From: "Matt D." <codespunk+cygwin AT gmail DOT com>
Reply-To: codespunk+cygwin AT gmail DOT com
Subject: Re: No way to use ssh ~/.ssh/config with "noacl" option
References: <59FD8C99 DOT 8010703 AT gmail DOT com> <20171104113723 DOT GC18070 AT calimero DOT vinschen DOT de> <59FDA8D9 DOT 6050808 AT gmail DOT com> <59FDC12F DOT 1080005 AT codespunk DOT com> <59FDDCFA DOT 9030306 AT codespunk DOT com> <87shdudp76 DOT fsf AT Rainer DOT invalid>
To: cygwin AT cygwin DOT com
Message-ID: <59FDF5BE.7060600@gmail.com>
Date: Sat, 4 Nov 2017 13:15:42 -0400
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0
MIME-Version: 1.0
In-Reply-To: <87shdudp76.fsf@Rainer.invalid>
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 7bit

On 11/4/2017 11:43 AM, Achim Gratz wrote:
> That's the correct thing to do, even though you made this unnecessarily
> hard for yourself by mounting your home directory with "noacl".

It's not perfect but I've always had trouble with all of the 
modifications Cygwin makes to a file's permissions to support 
POSIX-style ACLs. I do miss being able to manage them with chmod and 
setfacl though.

For those wishing to set their ssh config to 600 (as recognized by 
Cygwin's ssh), use the following:

Reset file permissions:
   icacls config /t /q /c /reset

Inheritence must be disabled to alter other groups:
   icacls config /inheritance:d

Effectively regarded as "group":
   icacls config /remove:g "Authenticated Users"
   icacls config /remove:g "Users"

Regarded as "other":
   icacls config /remove:g "Everyone"

Add the current user as the owner:
   icacls config /grant "%USERNAME%:rw"


Matt D.

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple