X-Recipient: archive-cygwin AT delorie DOT com
X-Original-To: cygwin AT cygwin DOT com
Delivered-To: cygwin AT cygwin DOT com
DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org 30FDD3858408
Authentication-Results: sourceware.org;
 dmarc=none (p=none dis=none) header.from=kosowsky.org
Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=kosowsky.org
X-CMAE-Analysis: v=2.4 cv=C9ssdSD+ c=1 sm=1 tr=0 ts=61d75b1e
 a=BYuR5sdBHlGgEYWvfiqr5Q==:117 a=BYuR5sdBHlGgEYWvfiqr5Q==:17
 a=kj9zAlcOel0A:10 a=DghFqjY3_ZEA:10 a=Y4wjOHm_AAAA:8 a=zafd1G_fv5RErmK-ISMA:9
 a=CjuIK1q_8ugA:10 a=vUyUeBe4x1l68iL-zyVZ:22
X-SECURESERVER-ACCT: inbox AT kosowsky DOT org
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on
 server2.sourceware.org
X-Spam-Status: No, score=-3.1 required=5.0 tests=BAYES_00, FROM_BLANK_NAME,
 KAM_DMARC_STATUS, NICE_REPLY_A, RCVD_IN_DNSWL_NONE, RCVD_IN_MSPIKE_H3,
 RCVD_IN_MSPIKE_WL, SPF_HELO_NONE, SPF_PASS,
 TXREP autolearn=ham autolearn_force=no version=3.4.4
X-Spam-Level: 
MIME-Version: 1.0
Message-ID: <25047.23325.33020.646017@consult.pretender>
Date: Thu, 6 Jan 2022 16:11:57 -0500
To: cygwin AT cygwin DOT com
Subject: Re: Duplicate ACLs? - Can't copy file even with Admin permissions
In-Reply-To: <8735m12k3u.fsf@Rainer.invalid>
References: <25043 DOT 7019 DOT 643488 DOT 389876 AT consult DOT pretender>
 <YdWCPsZOModGdRXM AT calimero DOT vinschen DOT de>
 <8735m12k3u DOT fsf AT Rainer DOT invalid>
X-Mailer: VM 8.2.0b under 25.2.2 (x86_64-pc-linux-gnu)
From: "" <cygwin AT kosowsky DOT org>
X-Virus-Scanned: ClamAV using ClamSMTP
X-CMAE-Envelope: MS4xfEoAnRekokc9e+8uG8k8InX77Y+oQO/D8dZBtVCSgRCwyuM9LI7U8WEzzzs/NVnK6uYr/uhjNQKcbNt8/RwsqUMFZDCIBVFygF+H4pPKWZgrT3k7HzYr
 xp0VelCck/oxLrVGYn5ifyV6Ud3/p1SHp0UsHjYHzXDCTDQ38iKNMrfj7xsXYdqQwozjTCUlV0hlioHHFNew+e30DhxlJGSPCt4=
X-BeenThere: cygwin AT cygwin DOT com
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Unsubscribe: <https://cygwin.com/mailman/options/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=unsubscribe>
List-Archive: <https://cygwin.com/pipermail/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe: <https://cygwin.com/mailman/listinfo/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
Reply-To: cygwin AT cygwin DOT com
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com
Sender: "Cygwin" <cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com>

Hi Corinna,

Corinna Vinschen wrote:
> On Jan  3 10:51, cyg DOT  DOT  DOT  AT kosowsky DOT org wrote:
> > I have a file: /c/Config.Msi/3da9e136.rbf that I cannot copy, even when
> > [...]
> >       # getfacl 3da9e136.rbf
> >       # file: 3da9e136.rbf
> >       # owner: Administrators
> >       # group: SYSTEM
> >       user::rwx
> >       group::rwx
> >       other::r-x
> >       user::rwx
> >       group::rwx
> >       group:SYSTEM:rwx
> >       mask::rwx
> >       other::r-x
> > [...]
> > Note that 'subinacl' shows:
> > =================================
> > +File C:\Config.Msi\3da9e136.rbf
> > =================================
> > /control=0x0
> > /owner             =builtin\administrators
> > /primary group     =system
> > /audit ace count   =0
> > /perm. ace count   =3
> > /pace =system  Type=0x0 Flags=0x3 AccessMask=0x1f01ff
> > /pace =everyone  Type=0x0 Flags=0x3 AccessMask=0x1200a9
> > /pace =builtin\administrators  Type=0x0 Flags=0x3 AccessMask=0x1f01ff
> 
> I don't see a reliable, trustable source for downloading subinacl, so
> let's do this with builtin tools.
> 
> I'm not sure what's going on on your machine.  I tried to reproduce your
> issue by creating a file with the exact same DACL:
> 
>   $ cat aclfile.sav
>   acltest
>   D:P(A;;FA;;;SY)(A;;0x1200a9;;;WD)(A;;FA;;;BA)
> 
> Note that the file is in UTF-16, the first two bytes are the BOM.
> 
>   $ icacls . /restore aclfile.sav
>   processed file: .\acltest
>   Successfully processed 1 files; Failed processing 0 files
>   $ icacls acltest
>   acltest NT AUTHORITY\SYSTEM:(F)
>           Everyone:(RX)
>           BUILTIN\Administrators:(F)
> 
>   Successfully processed 1 files; Failed processing 0 files
>   $ getfacl acltest
>   # file: acltest
>   # owner: Administrators
>   # group: SYSTEM
>   user::rwx
>   group::rwx
>   other::r-x
> 
> Would you mind to run `icacls 3da9e136.rbf /save 3da9e136.acl
> and paste the content of 3da9e136.acl into your reply?

I ran the code you suggested:
  #icacls 3da9e136.rbf /save 3da9e136.acl
  processed file: 3da9e136.rbf
  Successfully processed 1 files; Failed processing 0 files

  #cat 3da9e136.acl
  3da9e136.rbf
  D:P(A;OICI;FA;;;SY)(A;OICI;0x1200a9;;;WD)(A;OICI;FA;;;BA)

Not sure how to interpret the above but hope it's helpful...

  #icacls 3da9e136.rbf
  3da9e136.rbf NT AUTHORITY\SYSTEM:(OI)(CI)(F)
             Everyone:(OI)(CI)(RX)
             BUILTIN\Administrators:(OI)(CI)(F)

  Successfully processed 1 files; Failed processing 0 files

  #getfacl 3da9e136.rbf
  # file: 3da9e136.rbf
  # owner: Administrators
  # group: SYSTEM
  user::rwx
  group::rwx
  other::r-x
  user::rwx
  group::rwx
  group:SYSTEM:rwx
  mask::rwx
  other::r-x

> Please use "reply-to" to keep mail threading intact.  Your two
> mails in terms of this problem are disconnected for some reason.


Not sure why my MTA has not been threading properly but for some
reason I didn't receive your response either.

Hopefully this gets attached to the correct thread.

Jeff

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple