X-Recipient: archive-cygwin AT delorie DOT com
DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org C55703858002
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com;
	s=default; t=1681503498;
	bh=eVwt4A/8Z9WSAeGKwhFyk9NWxp5UuZyuzTv5MB3Bf4k=;
	h=Date:To:Subject:References:In-Reply-To:List-Id:List-Unsubscribe:
	 List-Archive:List-Post:List-Help:List-Subscribe:From:Reply-To:Cc:
	 From;
	b=c1Xag+l3Lxm5lzIDkwHhv0t2jqGWVY0tSUo5ceqHCoOsOBweUw749AyKHlnKgg5cM
	 lHSsMY3gx91kLIxneQJOK+2sqxd0/yhxxpvFL7QMqeMCRjae0sn7VxZ+EQq426mYrf
	 mJhhWlhDG/SsS9DokELw697z3/23BpKv2+uLKUMU=
X-Original-To: cygwin AT cygwin DOT com
Delivered-To: cygwin AT cygwin DOT com
DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org C4A923858C54
Date: Fri, 14 Apr 2023 22:17:39 +0200
To: cygwin AT cygwin DOT com
Subject: Re: Permissions question / issue
Message-ID: <ZDm045CihJaS5KXj@calimero.vinschen.de>
Mail-Followup-To: cygwin AT cygwin DOT com
References: <88697a53-26db-6969-2c18-3d6133d248c1 AT cs DOT umass DOT edu>
 <ZDmlSTitA7bLQzY1 AT calimero DOT vinschen DOT de>
 <87c859fc-0bfb-e6cc-a29e-29ba4eaa1820 AT cs DOT umass DOT edu>
 <1e61ce54-407c-a719-f55a-c8c8ccbc4d6b AT cs DOT umass DOT edu>
MIME-Version: 1.0
Content-Disposition: inline
In-Reply-To: <1e61ce54-407c-a719-f55a-c8c8ccbc4d6b@cs.umass.edu>
X-BeenThere: cygwin AT cygwin DOT com
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Unsubscribe: <https://cygwin.com/mailman/options/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=unsubscribe>
List-Archive: <https://cygwin.com/pipermail/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe: <https://cygwin.com/mailman/listinfo/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
From: Corinna Vinschen via Cygwin <cygwin AT cygwin DOT com>
Reply-To: cygwin AT cygwin DOT com
Cc: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com
Sender: "Cygwin" <cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com>

On Apr 14 15:49, Eliot Moss via Cygwin wrote:
> At present I have:
> 
> $ getfacl id_rsa2
> # file: id_rsa2
> # owner: moss
> # group: moss
> user::rw-
> group::---
> group:SYSTEM:r--        #effective:---
> mask::---
> other::---
> 
> $ icacls id_rsa2
> id_rsa2 NULL SID:(DENY)(Rc,DC)
>         ELIOT-SURFACE-3\moss:(R,W,D,WDAC,WO)
>         ELIOT-SURFACE-3\moss:(Rc,S,RA)
>         NT AUTHORITY\SYSTEM:(R)
>         Everyone:(Rc,S,RA)
> 
> I don't claim expert level understanding of the Windows access
> scheme, but Windows Explorer believes that SYSTEM has read access
> to the file, so I suppose this will work.  I guess we're kind of
> lying to cygwin a little - but in a way that is useful here.

Oh, cool, of course!  Given "mask" is POSIX-only, the backup tool should
work nicely.

Great solution!  I should have thought of that myself, given how long
I have hacked on this POSIX ACL stuff...


Corinna

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple