X-Recipient: archive-cygwin AT delorie DOT com X-Original-To: cygwin AT cygwin DOT com Delivered-To: cygwin AT cygwin DOT com DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org 12E1A3858D1E Authentication-Results: sourceware.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=gmail.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=message-id:date:mime-version:user-agent:subject:content-language:to :references:from:in-reply-to:content-transfer-encoding; bh=IwiN/zAygkd23D0mruJle/6wAjwhQJ27kWgAA2PsPCQ=; b=dm5shWRRO+e0Lw1+YgfyiCvq+TWg099ylTNGcjNLrwtaZlzc+6rh1CYI1C/bKg4TGw /lcUDsbMBdbcxTVnl4hfTv0XMaNCf3zm22mJQfdRlBzai5q4mQzCCnoPZEVXff57h/YI Jl9+jMIqvHIFeTkVr2zo6C2+rq5Z2KCl+2lCTHPi2m8IRadub9Z4hXeWxhfEi02rZM2a yFJhuQM/pffPXtQxAQhgyp/vQsmAUebd/enimUUhPJFhmrdN44nG2nv3jdQX+pvY/uoa HxiDRKVaehbFhIkWGc7TYCIXHJPdhzruSeYoPlPCLCXq2rNclQ5KCcAEVGfwMC0UekXo 61Yg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:message-id:date:mime-version:user-agent:subject :content-language:to:references:from:in-reply-to :content-transfer-encoding; bh=IwiN/zAygkd23D0mruJle/6wAjwhQJ27kWgAA2PsPCQ=; b=XmEIhseP4vHRrZF1OVTlUDNk0tMiI/RuxABl9bcvVmkhJ9EDGxzeTYN0yA+Ny9+mnm IX3QL/7CMrJ9BJKNbqTbs9gkWvgdydkyX96yzwfCp2o7J2bcfd8+Rrlhd1i0+1nFaDwu jmfMPmHyvzh/0X0SRcB9HO2LDINzmBu4YvNE4cx0og17gbvpbyGu8d7BaGGUuA5Nkxgi eXj+fAJ8lvgxRwB9izjCcMeJBFfOneCqrCOf0Gig2ZGfoygbpiL4eDBxSMF4dJ5nqlne tji6KJW24qlV/eAVOI7emzwn7W5ocCuOpdko9pKjwugKTR7/AZzwXQTEJylGjP4Gmqy5 OB8g== X-Gm-Message-State: AOAM531ncHBRzugV5GpZEkn+JcBjxHeN2AiILRuv8Vrw/6qOqbCq4F8+ LYWIu5sdLrEutCQj1ZVKCgGlEYqP/PI= X-Google-Smtp-Source: ABdhPJwirNandInOOG8nz5iLMjdRJWHiD6tCKK3pi+GXINky5mAPsieUzB63Vlpoe2l0B4YCGNkcfw== X-Received: by 2002:a17:907:c15:: with SMTP id ga21mr7625386ejc.356.1644521960052; Thu, 10 Feb 2022 11:39:20 -0800 (PST) Message-ID: <1bc0c300-e262-725f-96d2-aaba5259fa27@gmail.com> Date: Thu, 10 Feb 2022 20:39:18 +0100 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Thunderbird/91.5.1 Subject: Re: Permissions on Files Created with Cygwin Content-Language: it To: cygwin AT cygwin DOT com References: <48dbaee7-17f9-4652-2f45-c31980b0de2b AT cantab DOT net> From: Marco Atzeri In-Reply-To: <48dbaee7-17f9-4652-2f45-c31980b0de2b@cantab.net> X-Spam-Status: No, score=-1.5 required=5.0 tests=BAYES_00, DKIM_SIGNED, DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, FREEMAIL_FROM, NICE_REPLY_A, RCVD_IN_DNSWL_NONE, SPF_HELO_NONE, SPF_PASS, TXREP, T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.4 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on server2.sourceware.org X-BeenThere: cygwin AT cygwin DOT com X-Mailman-Version: 2.1.29 Precedence: list List-Id: General Cygwin discussions and problem reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8"; Format="flowed" Errors-To: cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com Sender: "Cygwin" Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from base64 to 8bit by delorie.com id 21AJdxSX009479 On 10.02.2022 17:48, Rob Stevens wrote: > Whenever I create files with cygwin (using whatever utilitity or editor) > I get these permissions as reported by icacls: >   NULL SID:(DENY)(Rc,S,X,DC) >   MALIN\rob:(R,W,D,WDAC,WO) >   NT AUTHORITY\SYSTEM:(DENY)(S,X) >   BUILTIN\Administrators:(DENY)(S,X) >   MALIN\None:(R) >   NT AUTHORITY\SYSTEM:(RX,W) >   BUILTIN\Administrators:(RX,W) >   Everyone:(R) > These permissions are not those inherited from the containing directory. > Not that only, but the windows utilities complain the the > permissions are mal-ordered. > > Is this not a bug?? Do I need a different (null?) umask in the environment? > do not change the order https://cygwin.com/cygwin-ug-net/ntsec.html see under "File permissions" The order of ACEs is important. The system reads them in sequence until either any single requested permission is denied or all requested permissions are granted. Reading stops when this condition is met. Later ACEs are not taken into account. Unfortunately, the security tab in the file properties dialog of the Windows Explorer will pop up a warning stating "The permissions on ... are incorrectly ordered, which may cause some entries to be ineffective." Pressing the Cancel button of the properties dialog fortunately leaves the sort order unchanged, but pressing OK will cause Explorer to canonicalize the order of the ACEs, thereby invalidating POSIX compatibility. -- Problem reports: https://cygwin.com/problems.html FAQ: https://cygwin.com/faq/ Documentation: https://cygwin.com/docs.html Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple