X-Recipient: archive-cygwin AT delorie DOT com
DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 0A4C43892035
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com;
	s=default; t=1641809348;
	bh=3gX3caOva6wNU1L72phthFwv4J30avW0f/08ckRQF8w=;
	h=Date:From:To:Subject:References:In-Reply-To:List-Id:
	 List-Unsubscribe:List-Archive:List-Post:List-Help:List-Subscribe:
	 Reply-To:From;
	b=c5Z8DGetbkKiB79k4brr/l8dAJU3B9Cl0Eijw0UIuPfAJLWLpcL6jrYrc91JULygW
	 aAD1N74dYy1jVElh5/+E0q6gNsRS7zpjzsrWHXBdRkk5KKzF0KeAA69C5eYYm+XShP
	 1l+ptTPUQSQetFf6zDzzx5N+HpXF6PRFwuNVXGOE=
X-Original-To: cygwin AT cygwin DOT com
Delivered-To: cygwin AT cygwin DOT com
DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org 0CCBC389202A
Authentication-Results: sourceware.org;
 dmarc=fail (p=none dis=none) header.from=cygwin.com
Authentication-Results: sourceware.org; spf=fail smtp.mailfrom=cygwin.com
Date: Mon, 10 Jan 2022 11:07:47 +0100
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: Duplicate ACLs? - Can't copy file even with Admin permissions
Message-ID: <YdwFc2JA5FfH1Ktr@calimero.vinschen.de>
Mail-Followup-To: cygwin AT cygwin DOT com, cygwin AT kosowsky DOT org
References: <25043 DOT 7019 DOT 643488 DOT 389876 AT consult DOT pretender>
 <YdWCPsZOModGdRXM AT calimero DOT vinschen DOT de>
 <8735m12k3u DOT fsf AT Rainer DOT invalid>
 <25047 DOT 23325 DOT 33020 DOT 646017 AT consult DOT pretender>
 <25048 DOT 43238 DOT 484068 DOT 737126 AT consult DOT pretender>
MIME-Version: 1.0
Content-Disposition: inline
In-Reply-To: <25048.43238.484068.737126@consult.pretender>
X-Provags-ID: V03:K1:YWC/Ai/+OTu1GJIUrHNfYvzzJf9l2G+F0D7M1KL80Ssl20o4LEz
 bIuBlAEwK8h/OzOLkkbaO/aQuHXbPTQVPn9UgsKMJix0XK8pgbpZnma+jKnqxCGm1+EDlaf
 YD8NaoXULDXvUTE/qHejlm7AXIB2SkGIR9sE9WMI9kJ+6UNASukvEY2F1XJaxqJRAfE83Wj
 x4RPDh/umpo6k9WQxU2rw==
X-UI-Out-Filterresults: notjunk:1;V03:K0:X0jbLxdgfQU=:GDf5qENHF0kWpp1tiA8UuW
 PL9qurFSigeePQzintf9izZ7VsqB5Kt3i1nVRHOhgEept5cGfxKZEbwieKNw7ROqgA0vURb04
 bC6GHZ2rb0UVORQJQFjY3asLBnlaS6XUwFPz0SGPdx1WyGGTfCUbG538HpvVY+S7VFWSqTlnn
 wXipwiY12tw5wvA168MVJIVOrFJQbbGYU54D2jAJGWP0yRNjmi5TTM9d1Qi7OFKQWcunbb3bL
 7z9C5QXj8kGknNHvllaOfUmaKMVdryLMTTOdHIo3CkAhxuQFIXJ6TYlfPODJMXackRN52kH3Y
 gJsPz2fuX0B3CamANa1iuO1rvQKzjOq9zqJi0+Bd2kEWTh0WnY2IbTxiL+bkAMRJ9e5RXY5WI
 xtr1PbIMmkmbkCDAmdx6sfus6y3LOmX5ucAzdQS4+JKpIuNyylMzZlNg5FBNUKKbG76nRF1du
 AAgc+wOs5Q0napRpKVommRSezSIoMV4XiZw9Do5mXZbhNB6w9S2xmXI8C0wYmATX/WuJnfgC8
 dKRtwtn9x4TDMfE3EhqnI9X8FVY/mjtmTNOI1cu+WHCuUz+b4qOW6dvMbbBIFk/yng4UEnH+Q
 c3mEMmDcKjxiXGDk8OTMeq0aBVMTbeQWACFq3n1Qgj+38qg4wXxYpGs9HNKFpswowLv87BP5T
 ukmSw521AbhnC/PCHhBll/vroAybpm0NTmNu+1STPH1dqFTkJcrFQkdnVhBGgfOkpZg0hu/UU
 o7pgA8IJetId4T9nE+gOOI6C5ISf+cIusJNg8Tk4uujqiLWqRs865DELy8VmXVXg5I2uv0ITk
 XzuD9H8oe19QWDAUFZAQCPdSN8DdOS8wJkr3gLhzXRLFxnvBjvyEI7PnVZEkqR8BzpiPGCApE
 6F5xgsBakK8k83D+qq1IQFuDUUL0KwtT5kVl97qageENVaqT1gRXVXxJBJGUE5dsnbJM0bOQ6
 5uRfmg5PkJPXZ2Auh5sdBIASUo8eJ6/W4AN7lwCwwkDGrZe41vtDfMOjwcgUhVaMiCneqeNm2
 lmAVaQSX/DA5weV8omip8Jo=
X-Spam-Status: No, score=-90.1 required=5.0 tests=BAYES_00,
 GOOD_FROM_CORINNA_CYGWIN, KAM_DMARC_NONE, KAM_DMARC_STATUS, RCVD_IN_DNSWL_NONE,
 SPF_FAIL, SPF_HELO_NONE, TXREP autolearn=ham autolearn_force=no version=3.4.4
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on
 server2.sourceware.org
X-BeenThere: cygwin AT cygwin DOT com
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Unsubscribe: <https://cygwin.com/mailman/options/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=unsubscribe>
List-Archive: <https://cygwin.com/pipermail/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe: <https://cygwin.com/mailman/listinfo/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
Reply-To: cygwin AT cygwin DOT com
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com
Sender: "Cygwin" <cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com>

On Jan  7 15:56, cygwin AT kosowsky DOT org wrote:
> > Corinna Vinschen wrote:
> > On Jan  6 16:11, cyg DOT  DOT  DOT  AT kosowsky DOT org wrote:
> > It is.  I realized belatedly, that 3da9e136.acl is apparently a
> > directory, not a file.
> 
> It's actually a file...

This is weird.  The meaning of the OI and CI markers are "Object
inheritance" and "Container inheritance".  These bits only make sense
for directories and they control how ACEs are inherited by child objects
(files) and child containers (subdirs).

Consequentially, if I use `icacls /restore' on a file with the DACL
saved by you, the OI and CI bits are simply ignored.  After /restore,
if I call /save again the resulting file looks like this:

  $ cat aclfile-after-restore.sav
  acltest
  D:PAI(A;;FA;;;SY)(A;;0x1200a9;;;WD)(A;;FA;;;BA)

However, this gave me a clue.  If this is really a file, it's a good
chance that the inheritance flags are restricted to directories at
one point in either the Cygwin DLL itself, or the getfacl tool.

I'll have a look into the sources later, but I sure would prefer if
I could create such a file locally.


Thanks,
Corinna

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple