DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:from:reply-to:to:subject:date:message-id
	:content-type:content-transfer-encoding:mime-version; q=dns; s=
	default; b=EgZqcxpUe5pd+AKvk21XKLd5eCnuA+nYH4xgNSMOhdq/i4TfVJr/M
	rNJ2VC3MtpVO3lXKPOqzmReGmURy9Td7tM5zrS4cxHfgTxbM6J+lYxFbikdZrzU3
	DWCQi0/0PyIanEcT/HkshDjHuWtCOCHJXl4SOPVeopYNQUSDslJG5g=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
IronPort-SDR: xZgtQKKJLJ/vao7IdC5ovmStiMKkhWO06iY2D4gBwmFFa4hKQT9afljwdTuybjSQ5MpK75e66h 6GrGCq4+4mrqOgOow9LwaFSM9Ftf2GoCCt7KEtSrghbsMHd67S3Q428ffWzn88md7QmkAO/557 afl5s8KdCV/VTSCPftjPg8Tk2BgaI1su8RV89TJiOPJWNKs+YLazdzHGO3NTdor/Hi15Q6qq7N Bw1VqGC3F93ppQng11VPSe7RVcxwYGhy/DxQ/6e7wt5ehnACMPohE9tWFdWLL6FacqDly1AvaY 1FA=
From: "Lavrentiev, Anton (NIH/NLM/NCBI) [C] via cygwin" <cygwin AT cygwin DOT com>
Reply-To: "Lavrentiev, Anton (NIH/NLM/NCBI) [C]" <lavr AT ncbi DOT nlm DOT nih DOT gov>
To: "'cygwin AT cygwin DOT com'" <cygwin AT cygwin DOT com>
Subject: Re: SMBFS mount's file cannot be made executable
Date: Wed, 14 Aug 2019 20:39:02 +0000
Message-ID: <BN6PR09MB1409241CD7F751EA43E8D0C0A5AD0@BN6PR09MB1409.namprd09.prod.outlook.com>
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-userprincipalname: YZtJgZMZxjSU3VhO6F33QpKcwbjAVy7YEuuE/tMQpQJJzDEApsJ+//ps9PXnpZ5W
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by delorie.com id x7EKdfTp027265

> See the '+' at the end of the modes?

I saw that, and I also showed the "getfacl" output for that file and the directory above, which showed
nothing additional.

> Maybe, but we'd still need to know how to get to the result you're seeing.

Just take a samba server (4.x) and mount a share with default settings on your Windows box; then
try to change the execute permissions for files in there from Cygwin's shell, using chmod -- the simplest.

> I hope it's clear to you that the permissions you see on this tab have
> nothing to do with the POSIX mode bits you're trying to set from Cygwin.

That is completely untrue;  the underlying filesystem is still controlled by the OS (Windows) in either case.
When the "x" permission is set from under Cygwin, it has to get converted (inside the Cygwin dll) to an appropriate
DAC for the native file system layer.  That DAC is then sent to the samba server (in case of the smb filesystem),
which then either converts it back to the "x" permission (when the SMBD is on Linux) or stores it on the target
filesystem, if that's a Windows box.

And it works the similar way in the reverse:  when a file stat is requested from Cygwin, the SMBD gets the "x" bit,
converts it to SMB response (native for Windows DAC for "execute") and sends it back to Windows box,
which is then read by Cygwin DLL and gets shown as "x" bit in the POSIX mode.  When I just use the file properties
dialog, I bypass only one step in the chains I just described, Cygwin DLL.  And it works by setting the "x" bit
on the server side (Linux).  So, that's how I know that something's off in how Cygwin treats that "x" permission
when asked to set it on a file.

When Windows is about to run an .exe file, it consults the filesystem whether the execute DAC is set.
In case of SMBD 4.x, the filesystem will respond "Access denied" if the "x" permission is not found.
It used to say "okay" in the previous versions.  I quoted the report:

https://forge.univention.org/bugzilla/show_bug.cgi?id=33785

So when I asked my Systems guys that the share to be exported with 

acl allow execute always = True

I can now execute any files (even those whose "x" bits are not set at all! -- SMBD clears everything to execute,
which is madness).  Well, that works around the issue for me, but the question remains as to why when "chmod +x" is given,
Cygwin does not cause the "x" permission to be set on the target file if that file resides on smbfs.
I suspect there are no provisions in code to do that, but I may be wrong.


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple