X-Recipient: archive-cygwin AT delorie DOT com DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 0A4C43892035 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com; s=default; t=1641809348; bh=3gX3caOva6wNU1L72phthFwv4J30avW0f/08ckRQF8w=; h=Date:From:To:Subject:References:In-Reply-To:List-Id: List-Unsubscribe:List-Archive:List-Post:List-Help:List-Subscribe: Reply-To:From; b=c5Z8DGetbkKiB79k4brr/l8dAJU3B9Cl0Eijw0UIuPfAJLWLpcL6jrYrc91JULygW aAD1N74dYy1jVElh5/+E0q6gNsRS7zpjzsrWHXBdRkk5KKzF0KeAA69C5eYYm+XShP 1l+ptTPUQSQetFf6zDzzx5N+HpXF6PRFwuNVXGOE= X-Original-To: cygwin AT cygwin DOT com Delivered-To: cygwin AT cygwin DOT com DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org 0CCBC389202A Authentication-Results: sourceware.org; dmarc=fail (p=none dis=none) header.from=cygwin.com Authentication-Results: sourceware.org; spf=fail smtp.mailfrom=cygwin.com Date: Mon, 10 Jan 2022 11:07:47 +0100 From: Corinna Vinschen To: cygwin AT cygwin DOT com Subject: Re: Duplicate ACLs? - Can't copy file even with Admin permissions Message-ID: Mail-Followup-To: cygwin AT cygwin DOT com, cygwin AT kosowsky DOT org References: <25043 DOT 7019 DOT 643488 DOT 389876 AT consult DOT pretender> <8735m12k3u DOT fsf AT Rainer DOT invalid> <25047 DOT 23325 DOT 33020 DOT 646017 AT consult DOT pretender> <25048 DOT 43238 DOT 484068 DOT 737126 AT consult DOT pretender> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: <25048.43238.484068.737126@consult.pretender> X-Provags-ID: V03:K1:YWC/Ai/+OTu1GJIUrHNfYvzzJf9l2G+F0D7M1KL80Ssl20o4LEz bIuBlAEwK8h/OzOLkkbaO/aQuHXbPTQVPn9UgsKMJix0XK8pgbpZnma+jKnqxCGm1+EDlaf YD8NaoXULDXvUTE/qHejlm7AXIB2SkGIR9sE9WMI9kJ+6UNASukvEY2F1XJaxqJRAfE83Wj x4RPDh/umpo6k9WQxU2rw== X-UI-Out-Filterresults: notjunk:1;V03:K0:X0jbLxdgfQU=:GDf5qENHF0kWpp1tiA8UuW PL9qurFSigeePQzintf9izZ7VsqB5Kt3i1nVRHOhgEept5cGfxKZEbwieKNw7ROqgA0vURb04 bC6GHZ2rb0UVORQJQFjY3asLBnlaS6XUwFPz0SGPdx1WyGGTfCUbG538HpvVY+S7VFWSqTlnn wXipwiY12tw5wvA168MVJIVOrFJQbbGYU54D2jAJGWP0yRNjmi5TTM9d1Qi7OFKQWcunbb3bL 7z9C5QXj8kGknNHvllaOfUmaKMVdryLMTTOdHIo3CkAhxuQFIXJ6TYlfPODJMXackRN52kH3Y gJsPz2fuX0B3CamANa1iuO1rvQKzjOq9zqJi0+Bd2kEWTh0WnY2IbTxiL+bkAMRJ9e5RXY5WI xtr1PbIMmkmbkCDAmdx6sfus6y3LOmX5ucAzdQS4+JKpIuNyylMzZlNg5FBNUKKbG76nRF1du AAgc+wOs5Q0napRpKVommRSezSIoMV4XiZw9Do5mXZbhNB6w9S2xmXI8C0wYmATX/WuJnfgC8 dKRtwtn9x4TDMfE3EhqnI9X8FVY/mjtmTNOI1cu+WHCuUz+b4qOW6dvMbbBIFk/yng4UEnH+Q c3mEMmDcKjxiXGDk8OTMeq0aBVMTbeQWACFq3n1Qgj+38qg4wXxYpGs9HNKFpswowLv87BP5T ukmSw521AbhnC/PCHhBll/vroAybpm0NTmNu+1STPH1dqFTkJcrFQkdnVhBGgfOkpZg0hu/UU o7pgA8IJetId4T9nE+gOOI6C5ISf+cIusJNg8Tk4uujqiLWqRs865DELy8VmXVXg5I2uv0ITk XzuD9H8oe19QWDAUFZAQCPdSN8DdOS8wJkr3gLhzXRLFxnvBjvyEI7PnVZEkqR8BzpiPGCApE 6F5xgsBakK8k83D+qq1IQFuDUUL0KwtT5kVl97qageENVaqT1gRXVXxJBJGUE5dsnbJM0bOQ6 5uRfmg5PkJPXZ2Auh5sdBIASUo8eJ6/W4AN7lwCwwkDGrZe41vtDfMOjwcgUhVaMiCneqeNm2 lmAVaQSX/DA5weV8omip8Jo= X-Spam-Status: No, score=-90.1 required=5.0 tests=BAYES_00, GOOD_FROM_CORINNA_CYGWIN, KAM_DMARC_NONE, KAM_DMARC_STATUS, RCVD_IN_DNSWL_NONE, SPF_FAIL, SPF_HELO_NONE, TXREP autolearn=ham autolearn_force=no version=3.4.4 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on server2.sourceware.org X-BeenThere: cygwin AT cygwin DOT com X-Mailman-Version: 2.1.29 Precedence: list List-Id: General Cygwin discussions and problem reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: cygwin AT cygwin DOT com Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com Sender: "Cygwin" On Jan 7 15:56, cygwin AT kosowsky DOT org wrote: > > Corinna Vinschen wrote: > > On Jan 6 16:11, cyg DOT DOT DOT AT kosowsky DOT org wrote: > > It is. I realized belatedly, that 3da9e136.acl is apparently a > > directory, not a file. > > It's actually a file... This is weird. The meaning of the OI and CI markers are "Object inheritance" and "Container inheritance". These bits only make sense for directories and they control how ACEs are inherited by child objects (files) and child containers (subdirs). Consequentially, if I use `icacls /restore' on a file with the DACL saved by you, the OI and CI bits are simply ignored. After /restore, if I call /save again the resulting file looks like this: $ cat aclfile-after-restore.sav acltest D:PAI(A;;FA;;;SY)(A;;0x1200a9;;;WD)(A;;FA;;;BA) However, this gave me a clue. If this is really a file, it's a good chance that the inheritance flags are restricted to directories at one point in either the Cygwin DLL itself, or the getfacl tool. I'll have a look into the sources later, but I sure would prefer if I could create such a file locally. Thanks, Corinna -- Problem reports: https://cygwin.com/problems.html FAQ: https://cygwin.com/faq/ Documentation: https://cygwin.com/docs.html Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple