X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=pThCMVX7TeEzrrojazHMe+f6TDFen4P6ZWqxoF4iSXgNWAEvzOG1I
	OBke2kpibnbG00jdYdD5MiopCgzCyMCoWm4PoJxFi+91oNScx4pymxbDrZGvvMP7
	O0ChQAQ1SKjYx/looY/DxEAI5kPsYWtDqhiZ1bhid72a/pM699DaM8=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	 bh=6CDDUr1XBaBFzSKDPzAJDgtjyoo=; b=M1J9HEcV3XafzYfANFwrGPzEkGXC
	+OkfbpuC4MPUf2J2RSrh78bXKpnuDM5PQcBeTBBpAVrT1GL2JOyuqiUMp0SdF3KS
	SQqv3gpW6bWnyjcO9v+nFehkTyB0kJgOeFQajOQlWPh20m/OEgUcD8iRiNNfPi9W
	HXtrZgFOMJZYPok=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Spam-SWARE-Status: No, score=-104.7 required=5.0 tests=AWL,BAYES_00,GIT_PATCH_2,GOOD_FROM_CORINNA_CYGWIN,RCVD_IN_DNSWL_NONE autolearn=ham version=3.3.1 spammy=H*F:D*cygwin.com, yours, H*MI:sk:2019031
X-HELO: mout.kundenserver.de
Date: Wed, 13 Mar 2019 10:32:04 +0100
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: win dirs don't handle lack of inherited rule(?): getfacl + tar dir Warning: Cannot acl_to_text: Invalid argument
Message-ID: <20190313093204.GV3785@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <5C81E2EE DOT 7020708 AT tlinx DOT org> <20190308121543 DOT GI3785 AT calimero DOT vinschen DOT de> <5C84EB7B DOT 70408 AT tlinx DOT org> <7a3eaccf-511a-b71f-7f99-45a9bef35b29 AT SystematicSw DOT ab DOT ca> <5C87D41E DOT 30702 AT tlinx DOT org> <20190312163617 DOT GJ3785 AT calimero DOT vinschen DOT de> <5C886976 DOT 30505 AT tlinx DOT org> <20190313091848 DOT GU3785 AT calimero DOT vinschen DOT de>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;	protocol="application/pgp-signature"; boundary="a/RL+Md+4nRpYrpt"
Content-Disposition: inline
In-Reply-To: <20190313091848.GU3785@calimero.vinschen.de>
User-Agent: Mutt/1.11.3 (2019-02-01)

--a/RL+Md+4nRpYrpt
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mar 13 10:18, Corinna Vinschen wrote:
> On Mar 12 19:22, L A Walsh wrote:
> > Hope this is ok...the original was in utf16, it's also all one line...
>=20
> No worries.
>=20
> > On 3/12/2019 9:36 AM, Corinna Vinschen wrote:
> > > Can you please create an acl file like this:
> > >=20
> > > $ icacls default.nlaw-32 /save x.acl
> > ---
> > default.nlaw-32
> > D:P(D;;SWRPWPDTRC;;;S-1-0-0)(A;;FA;;;S-1-5-21-33333-77777-33333-5013)(A=
;;0x1201ff;;;S-1-5-21-33333-77777-33333-201)(A;;0x1201ff;;;S-1-5-80-9560088=
85-3418522649-1831038044-1853292631-2271478464)(A;;0x1201ff;;;SY)(A;;0x1201=
ff;;;DA)(A;;0x1201ff;;;BA)(A;;0x1201ff;;;S-1-5-21-1885695451-752926663-1105=
222378-1015)(A;;0x120080;;;WD)S:AI(ML;OICIID;NW;;;HI)
>=20
> Thank you.  This allowed me to create a file with an equivalent DACL...
> almost.
>=20
> The interesting thing here is that after ACL restoration the DACL has
> all the entries as yours, in the same order, except that the=20
>=20
>   Mandatory Label\High Mandatory Level:(I)(OI)(CI)(NW)
>=20
> entry is not created.  I tried the same under the SYSTEM account and
> it still silenty ignored the above entry.
>=20
> Given that the DACL is no problem for getfacl without this mandatory
> label entry, I have to assume that this is what acl_to_text chokes on.
>=20
> The problem now is... how on earth can I create an ACL with this
> entry?  The GUI does not allow to add it and icacls apparently
> doesn't allow this either, even though it shows it nicely.

Never mind, I managed to add a Mandatory label with

  icacls filename /setintegritylevel '(CI)(OI)H'

and I can now reproduce the "Invalid argument".


Corinna

--=20
Corinna Vinschen
Cygwin Maintainer

--a/RL+Md+4nRpYrpt
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEoVYPmneWZnwT6kwF9TYGna5ET6AFAlyIzhQACgkQ9TYGna5E
T6BxphAAhbD7UIgXNXnLCr0CZGuemuQ0rysadEy6R+vH1tRnktOJRK7doM1c8nvM
zEYudBHPy//1hoBg3DYr9gFjd/mSS9ZZa8Lsw8MtrQvMDzhQzljeJGjkQGCVhqAc
u2YKv7nLQHaq+BdovOAvHm1AP/8vXtS5iNJXppKhJf5C4sgJmq8mXGsUg99Y81I5
8HIRjVsyLtlBkgY51UPo2p1kIfEo/kEpdSdXsgCm1NOm5wQzJCJ6RulFe5JgzgDe
UTbnxtmnOZY2chxcyIK3t+Qr7hwK5YBle74D0+W783v4hJR3q5CX/pyazhkKU0al
wEfBjq6miRePtyzS4R8dn6hxfElxdFgWhYpHr5aWicS1rLd1SfssySaj3hxTVV01
+MSSQKFX3KEI3gTemeEqGdv+ydyPGKktWzGuUW417M4DLLSVOEtBWIKcW/9ZVSVh
z0BMKXvTZwHZ/NI7nWQnYiXhaA4VRMSDhhGWSKyXbVoQ0lkIHyV0IgXKY6sJy2Mk
0CshYEBn1C1wFQfinfEqAbJtD7jIRE8SBAwkzhfgfVfJqgJS9hpZegsIUqySbI7+
4RSThHIeoTHtELRQscd3XPfT9cT7Bw+ThdtW5TChaSL2Mw1SQGmUm6LVLehlxerA
t6BEeTTfg+yhUq2PN7Bew+mFq/tqh/5eHlOKObchK7T1njqKnio=
=h9Yv
-----END PGP SIGNATURE-----

--a/RL+Md+4nRpYrpt--