DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 700273858C32
Message-ID: <947bc8610a34164e8047dec9ba13cf21e24686c1.camel@gmx.li>
Subject: endless loop with junction points
To: cygwin AT cygwin DOT com
Date: Fri, 05 Apr 2024 10:04:42 +0200
User-Agent: Evolution 3.38.3-1+deb11u2 
MIME-Version: 1.0
UI-OutboundReport: notjunk:1;M01:P0:sjfQLJvpIW0=;rIbafciv7n5QyPLn/kxNWhPfeHS
 JOQ0G3VzMIsN0J8vKM1M8cCFkdowSqjjYGgAeC74yFmlAi7BXLam4XSIdD6LOh6BQ8YWPEHRX
 gjfKcWMQ++2yEsLpNvXMenyq/5nQmGRxj3Dtu4k5uELezFHgNHOLe+IDt65QvuoGDLAiflUtj
 2Av1U4K3tTVCwf+kulPwiGSdn6YUnLXSoJR+ibA4kC35Kwd/sgT50eXR4aonK+KCxKVRo1/G9
 YB7JKj7aNZ+W/DwXJrNB/nCZ799Bea5uDXRe1NO+zFQDTDSH5ubGDI8i9PGXA//qDSORovtmz
 n4grn/68uVcXiddzxPoBLomtedK2mW8cL96awDZ7mcmoLAVJWghk5ORb9OqoWKF8KJmuGOe1F
 ybgOA7C80RZ+UxEXrDeiidzANJ83xsMuiOCpcZf0THRQqufr4lThTNMsgUyrETlLlspoJOHiz
 nUAEUeWJW0Ij3wofo3gGT5QMfcVf1YDcxxSWYKTVUzqKivqABnfD2s1EZJhZcFgOzRTUoRKNs
 OumQR6AZZd66WJ0YFP7uZXrsz5HLb63OlmiLknL1HfVDUJdsv7BfqY1HQ1ayTpPUpI3pWLPKh
 lfXJa30MAQCu28B5kV/iUnClggx+1z1558JjtpGAScK2DCxAJZRgOcAx9OCBtvlIolulTk0hc
 zVdo2mqtUCqzdFJg505rJextVXiB3QoGOamd5rRsUFr59zLwJ9a8zFKAPkEc3jwZMukFTXWmI
 8l2n9ZIs+obC4sm3S8VTPP9+MbkTFOneib6hSbJ8BWxbw/QuTc2o9/cewSXpBzMwFrRLN30aJ
 DYojoMU9QqzgHk3zA4I6JMzM048EzrBVtN/Z14oZDXvtg=
From: Matthias--- via Cygwin <cygwin AT cygwin DOT com>
Reply-To: "Matthias AT gmx DOT li" <matthias DOT meyer AT gmx DOT li>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: "Cygwin" <cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com>

I try to save ACLs during a ssh session to my windows client with an ${priv_user} with following
access rights:
   editrights -a SeAssignPrimaryTokenPrivilege -u ${priv_user}
   editrights -a SeCreateTokenPrivilege -u ${priv_user}
   editrights -a SeTcbPrivilege -u ${priv_user}
   editrights -a SeDenyRemoteInteractiveLogonRight -u ${priv_user}
   editrights -a SeServiceLogonRight -u ${priv_user}

In the ssh terminal I run:
   icacls "C:\Users\*" /save C:\obsAttrib\ACLinfo /T /C /L /Q

Unfortunately it doesn't work because icacls follows junctions points in an endless loop. e.g.:
   C:\Users\All Users\Application Data\Application Data\Application Data\Application
   Data\Application Data\Application Data\Application Data\Application Data\Application
   Data\Application Data\Application Data\Adobe\ARM\Reader_15.010.20060\meyer\ReaderDCManifest.msi:
   The system cannot find the path specified


If I run the same command from an CMD Terminal (as administrator) it work. icacls don't follow the
junctions. icacls report "Access is denied" for all junction points.

In opposite - if I run ls -R "/cygdrive/C/Users/Application Data" it also don't follow the junction
point.

Any hint how to execute icacls?

Thanks in advance
Matthias


-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple