X-Recipient: archive-cygwin AT delorie DOT com
DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 032FB385843D
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com;
	s=default; t=1641384414;
	bh=ErulTxmTUDVz+CQveTAiX155sc2aGA0JSs4CTeC6/WQ=;
	h=Date:From:To:Subject:References:In-Reply-To:List-Id:
	 List-Unsubscribe:List-Archive:List-Post:List-Help:List-Subscribe:
	 Reply-To:From;
	b=qWfE3MHGmBq5UV6YloW1aBAFRZvAAsZ0ajiYItU38QaLOJZO0PNyaV+Fiy1cxNQmP
	 hd9+AviCESn8p0c+19Sgu3WonNCx1iZBh7vG8BpgTALMgyFXds5dmmMSjLHIjcVnwR
	 CalnnrlbLujBjpabtwHQrde+FdFlvv8BpPMfVYvs=
X-Original-To: cygwin AT cygwin DOT com
Delivered-To: cygwin AT cygwin DOT com
DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org 70311385842C
Authentication-Results: sourceware.org;
 dmarc=fail (p=none dis=none) header.from=cygwin.com
Authentication-Results: sourceware.org; spf=fail smtp.mailfrom=cygwin.com
Date: Wed, 5 Jan 2022 12:34:22 +0100
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: Duplicate ACLs? - Can't copy file even with Admin permissions
Message-ID: <YdWCPsZOModGdRXM@calimero.vinschen.de>
Mail-Followup-To: cygwin AT cygwin DOT com, cygwin AT kosowsky DOT org
References: <25043 DOT 7019 DOT 643488 DOT 389876 AT consult DOT pretender>
MIME-Version: 1.0
Content-Disposition: inline
In-Reply-To: <25043.7019.643488.389876@consult.pretender>
X-Provags-ID: V03:K1:T9RcnAbJq3oRvjKA/mMGMv2n7MRquNOx+dk4AJIH78g9Y7yBMiI
 sn6SHM/V5+uKkPvo5qLT4liuAFc2bMEDCqBZMiKRakk/FoBOsw2RHvvFb3JnEs811pjgBNT
 ibdko0qUZJKoyDV/BzNCFQGCpJzEEG0MqtHyRQLfYaJLRpwGaS74c3cHRn0DcVfJPqvm2gB
 MhHetsgc5tCmKDQXCFxCg==
X-UI-Out-Filterresults: notjunk:1;V03:K0:SbCvVB4XmL4=:0+QDoREoPchN4+bHENMcu/
 hOlq3YsdH9bAZK+DfLF92OrskM1BsRAB9Uet7hX6rOgFv6eGq1c1vnS9dDtepK/ZJ6FjsMY/k
 jCk7O8IqupIvVfUEe8Ss7YF/PMsSvL1QYsDTxDCG9+r1j3BbTfGKQDSGhNyLyDxBwuA2r/VIi
 8qv8p/hsP2ocbvJZWqe/MzyhNN/mWn4NUWKiu6ZiChnZlvmMjZAMU+u5XjQ+UQ1eFIzgJ/b7Z
 zlYsrCPbWfgjqf96+o4QO4j6izxyZ2ltuO54nxpxf15TaJ6q/m0/uXWxE1fIM/JcoQJzMFjUT
 vp16/6deoMh28BsQcmYSDtQ5zk9ViiVOfdaSQNcOydAgaIdiKN1SWXWOgbeaZ26vpwKk3ISAZ
 h86jIxUp1M/XDBHB5VtAcMh0U7Z3edEph/tXMxKLqzDETP5+Papp5dvIpNVE8INi91x/gIepV
 CrdPDQI7opSBIolWbseWQ4u24h4bk4umaaAOxSL+8ZiZAK+dQyBbxM3aVOYYG4Tmjgl5xmviO
 PsJTvNlRAApOFsAdWuUTH83GVZ1Eocull5mRzn36FA2/iTuvWMTN2mUso8ZchePfPO2UGby0c
 dlXJRXlwKGkLUM0AhRRngtLOcsH1RWIYQYyAuA2fy6ojMbQ0B6ynwkX2xw4hSvDqWtEZpJJBp
 2XtdJ22TIG7VNNUGlXIrBy9S8HidtGRLYalxPaDQw7x15GC/JY7f96J1Rpw9aB7TToeAo0mF4
 vaj8AqvbPIW887M6
X-Spam-Status: No, score=-79.2 required=5.0 tests=BAYES_00,
 GOOD_FROM_CORINNA_CYGWIN, KAM_DMARC_NONE, KAM_DMARC_STATUS, RCVD_IN_DNSWL_NONE,
 RCVD_IN_MSPIKE_H4, RCVD_IN_MSPIKE_WL, SPF_FAIL, SPF_HELO_NONE,
 TXREP autolearn=ham autolearn_force=no version=3.4.4
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on
 server2.sourceware.org
X-BeenThere: cygwin AT cygwin DOT com
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Unsubscribe: <https://cygwin.com/mailman/options/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=unsubscribe>
List-Archive: <https://cygwin.com/pipermail/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe: <https://cygwin.com/mailman/listinfo/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
Reply-To: cygwin AT cygwin DOT com
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com
Sender: "Cygwin" <cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com>

On Jan  3 10:51, cygwin AT kosowsky DOT org wrote:
> I have a file: /c/Config.Msi/3da9e136.rbf that I cannot copy, even when
> [...]
> 	# getfacl 3da9e136.rbf
> 	# file: 3da9e136.rbf
> 	# owner: Administrators
> 	# group: SYSTEM
> 	user::rwx
> 	group::rwx
> 	other::r-x
> 	user::rwx
> 	group::rwx
> 	group:SYSTEM:rwx
> 	mask::rwx
> 	other::r-x
> [...]
> Note that 'subinacl' shows:
> =================================
> +File C:\Config.Msi\3da9e136.rbf
> =================================
> /control=0x0
> /owner             =builtin\administrators
> /primary group     =system
> /audit ace count   =0
> /perm. ace count   =3
> /pace =system  Type=0x0 Flags=0x3 AccessMask=0x1f01ff
> /pace =everyone  Type=0x0 Flags=0x3 AccessMask=0x1200a9
> /pace =builtin\administrators  Type=0x0 Flags=0x3 AccessMask=0x1f01ff

I don't see a reliable, trustable source for downloading subinacl, so
let's do this with builtin tools.

I'm not sure what's going on on your machine.  I tried to reproduce your
issue by creating a file with the exact same DACL:

  $ cat aclfile.sav
  acltest
  D:P(A;;FA;;;SY)(A;;0x1200a9;;;WD)(A;;FA;;;BA)

Note that the file is in UTF-16, the first two bytes are the BOM.

  $ icacls . /restore aclfile.sav
  processed file: .\acltest
  Successfully processed 1 files; Failed processing 0 files
  $ icacls acltest
  acltest NT AUTHORITY\SYSTEM:(F)
	  Everyone:(RX)
	  BUILTIN\Administrators:(F)

  Successfully processed 1 files; Failed processing 0 files
  $ getfacl acltest
  # file: acltest
  # owner: Administrators
  # group: SYSTEM
  user::rwx
  group::rwx
  other::r-x

Would you mind to run `icacls 3da9e136.rbf /save 3da9e136.acl
and paste the content of 3da9e136.acl into your reply?

Please use "reply-to" to keep mail threading intact.  Your two
mails in terms of this problem are disconnected for some reason.


Thanks,
Corinna

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple