X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=ZoKNeZwoTqCEwJLs0x5T+nuC6aFvGnaFpqDvudDjjESu4Mx5tWhxf
	VaYSW9xo4zJddDx8pPWxjDOVYqLvCeh4EX8MFsmyIKEPqeMV3Yp7WxEl7XqBfE+8
	0z6fOZj81xXC873XfnrwONDAF3qZ50/kBKdHLS10AXdIzDX0+FplOg=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	 bh=EgqhkCinOQz37FAhWdJVCGbtYBk=; b=OCBtnSre6UJfdS35SYlEq/WfddQA
	IL8PfVpaz9h704UkA6QzL2LzcSYVi1rDau8PQ/PRCHylb3/qL3URNpVN8MncRZjM
	celm+al5oXMf1iv6KheqU9vDgHMSKDk+7eJkAngU9AG3is1jNEA2TiMuuD6NS0Ms
	MsbmAHWp40+ZBQU=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Spam-SWARE-Status: No, score=-104.6 required=5.0 tests=AWL,BAYES_00,GIT_PATCH_2,GOOD_FROM_CORINNA_CYGWIN,RCVD_IN_DNSWL_NONE autolearn=ham version=3.3.1 spammy=Hope, gui, H*F:D*cygwin.com, yours
X-HELO: mout.kundenserver.de
Date: Wed, 13 Mar 2019 10:18:48 +0100
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: win dirs don't handle lack of inherited rule(?): getfacl + tar dir Warning: Cannot acl_to_text: Invalid argument
Message-ID: <20190313091848.GU3785@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <5C81E2EE DOT 7020708 AT tlinx DOT org> <20190308121543 DOT GI3785 AT calimero DOT vinschen DOT de> <5C84EB7B DOT 70408 AT tlinx DOT org> <7a3eaccf-511a-b71f-7f99-45a9bef35b29 AT SystematicSw DOT ab DOT ca> <5C87D41E DOT 30702 AT tlinx DOT org> <20190312163617 DOT GJ3785 AT calimero DOT vinschen DOT de> <5C886976 DOT 30505 AT tlinx DOT org>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;	protocol="application/pgp-signature"; boundary="GkyPMzQoklWKZOV/"
Content-Disposition: inline
In-Reply-To: <5C886976.30505@tlinx.org>
User-Agent: Mutt/1.11.3 (2019-02-01)

--GkyPMzQoklWKZOV/
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mar 12 19:22, L A Walsh wrote:
> Hope this is ok...the original was in utf16, it's also all one line...

No worries.

> On 3/12/2019 9:36 AM, Corinna Vinschen wrote:
> > Can you please create an acl file like this:
> >=20
> > $ icacls default.nlaw-32 /save x.acl
> ---
> default.nlaw-32
> D:P(D;;SWRPWPDTRC;;;S-1-0-0)(A;;FA;;;S-1-5-21-33333-77777-33333-5013)(A;;=
0x1201ff;;;S-1-5-21-33333-77777-33333-201)(A;;0x1201ff;;;S-1-5-80-956008885=
-3418522649-1831038044-1853292631-2271478464)(A;;0x1201ff;;;SY)(A;;0x1201ff=
;;;DA)(A;;0x1201ff;;;BA)(A;;0x1201ff;;;S-1-5-21-1885695451-752926663-110522=
2378-1015)(A;;0x120080;;;WD)S:AI(ML;OICIID;NW;;;HI)

Thank you.  This allowed me to create a file with an equivalent DACL...
almost.

The interesting thing here is that after ACL restoration the DACL has
all the entries as yours, in the same order, except that the=20

  Mandatory Label\High Mandatory Level:(I)(OI)(CI)(NW)

entry is not created.  I tried the same under the SYSTEM account and
it still silenty ignored the above entry.

Given that the DACL is no problem for getfacl without this mandatory
label entry, I have to assume that this is what acl_to_text chokes on.

The problem now is... how on earth can I create an ACL with this
entry?  The GUI does not allow to add it and icacls apparently
doesn't allow this either, even though it shows it nicely.


Puzzled,
Corinna

--=20
Corinna Vinschen
Cygwin Maintainer

--GkyPMzQoklWKZOV/
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=5kmK
-----END PGP SIGNATURE-----

--GkyPMzQoklWKZOV/--