X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:cc:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=YVXgWH0f2yE0Jq85s+dEsBCY8tHYIfijPA8KNE3mLyizjUM2XwXF4
	a8VDkGxfdHmb7LH4NG7zBCaXpFOWiVtm1WkDR/2rUjHfPVNoQZ25ey27gvV0BR6m
	vYkWoC9NDiieVZ4RnUQLkpDfyibp9IY7rGvA52ywE9SvMsaP+l3V5w=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:cc:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	 bh=6DA6VVt5Lx5WxE3KwzxtHNNB9/0=; b=sJAABdnvV7RI78JLzN8oPATW4fIC
	t1k6YbOBatTEVOhuxxscz8y14vlI+aNrbTr3OUAwcY2+K19Ot+MF0lg+H3By3KVt
	MC+FaojdFOmVAiLiiIkgavZizKcu43MaPkjkVCU73lHnsAMseR7uKmWzYDyyHPcu
	2/4fHSYnfkdc1Wk=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Spam-SWARE-Status: No, score=-103.8 required=5.0 tests=AWL,BAYES_00,GIT_PATCH_2,GOOD_FROM_CORINNA_CYGWIN,RCVD_IN_DNSWL_NONE,WEIRD_QUOTING autolearn=ham version=3.3.1 spammy=familiar, H*F:D*cygwin.com
X-HELO: mout.kundenserver.de
Date: Tue, 12 Mar 2019 17:36:17 +0100
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: L A Walsh <cygwin AT tlinx DOT org>
Cc: cygwin AT cygwin DOT com
Subject: Re: win dirs don't handle lack of inherited rule(?): getfacl + tar dir Warning: Cannot acl_to_text: Invalid argument
Message-ID: <20190312163617.GJ3785@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: L A Walsh <cygwin AT tlinx DOT org>, cygwin AT cygwin DOT com
References: <5C81E2EE DOT 7020708 AT tlinx DOT org> <20190308121543 DOT GI3785 AT calimero DOT vinschen DOT de> <5C84EB7B DOT 70408 AT tlinx DOT org> <7a3eaccf-511a-b71f-7f99-45a9bef35b29 AT SystematicSw DOT ab DOT ca> <5C87D41E DOT 30702 AT tlinx DOT org>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;	protocol="application/pgp-signature"; boundary="VLIBou5mBM6+kGHE"
Content-Disposition: inline
In-Reply-To: <5C87D41E.30702@tlinx.org>
User-Agent: Mutt/1.11.3 (2019-02-01)

--VLIBou5mBM6+kGHE
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mar 12 08:45, L A Walsh wrote:
> On 3/10/2019 7:09 AM, Brian Inglis wrote:
> > Define this sh function, run it on problematic directories or files, an=
d reply
> > with the output:
> >
> > # lsp - list permissions with ls, getfacl, icacls
> > lsp ()
> > {
> >     local p;
> >     for p in "$@";
> >     do
> >         ls --color=3Dauto -dl "$p";
> >         getfacl "$p";
> >         icacls "$(cygpath -m ""$p"")";
> >     done
> > }
> >
> > e.g. and running my cygcheck sanitizer over the output:
> >=20=20=20
> ---
>     What is your cygcheck sanitizer?  I don't think I'm familiar with it.=
..
>=20
> ok, the top directory of my Palemoon install just below the
> profiles dir has the problem from tar:
>=20
> tar: default.nlaw-32: Warning: Cannot acl_to_text: Invalid argument
> Your script (thank you very much!), shows:
>=20
> > lstp default.nlaw-32
> drwxrwx---+ 1 Bliss\law Bliss\lawgroup 0 Mar 12 08:30 default.nlaw-32
> # file: default.nlaw-32
> # owner: Bliss\law
> # group: Bliss\lawgroup
> user::rwx
> group::rwx
> group:TrustedInstaller:rwx
> group:SYSTEM:rwx
> group:Bliss\Domain Admins:rwx
> group:Administrators:rwx
> group:lawgroup:rwx
> mask::rwx
> other::---
> getfacl: default.nlaw-32: Invalid argument
>=20
> default.nlaw-32 NULL SID:(DENY)(Rc,S,REA,WEA,X,DC)
>                 Bliss\law:(F)
>                 BLISS\lawgroup:(RX,W,DC)
>                 NT SERVICE\TrustedInstaller:(RX,W,DC)
>                 NT AUTHORITY\SYSTEM:(RX,W,DC)
>                 BLISS\Domain Admins:(RX,W,DC)
>                 BUILTIN\Administrators:(RX,W,DC)
>                 Athenae\lawgroup:(RX,W,DC)
>                 Everyone:(Rc,S,RA)
>                 Mandatory Label\High Mandatory Level:(I)(OI)(CI)(NW)
>=20
> Successfully processed 1 files; Failed processing 0 files
> ------
> Does that give any insight into the problem?

Can you please create an acl file like this:

$ icacls default.nlaw-32 /save x.acl

and send the x.acl file?  This should allow me to create an equivalent
DACL for testing.


Thanks,
Corinna

--=20
Corinna Vinschen
Cygwin Maintainer

--VLIBou5mBM6+kGHE
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=NeTF
-----END PGP SIGNATURE-----

--VLIBou5mBM6+kGHE--