DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org A0331385B503
Message-ID: <77920475-0ff2-4c1d-9331-39593c1cb46e@gmail.com>
Date: Fri, 19 Jul 2024 13:06:43 +0300
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Content-Language: en-US
To: cygwin AT cygwin DOT com
Subject: noacl no longer effective under /cygdrive. Still works in other
 locations
From: ilya Basin via Cygwin <cygwin AT cygwin DOT com>
Reply-To: ilya Basin <basinilya AT gmail DOT com>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: "Cygwin" <cygwin-bounces~archive-cygwin=delorie DOT com AT cygwin DOT com>

Hi.
For several years I had this in my /etc/fstab.d/$USER

    C: /cygdrive/c none binary,noacl,posix=0,user 0 0

I switched from Cygwin x86 to x64 recently and I noticed that even if `mount` prints this:

    $ mount | grep C:
    C:/cygwin64/bin on /usr/bin type ntfs (binary,auto)
    C:/cygwin64/lib on /usr/lib type ntfs (binary,auto)
    C:/cygwin64 on / type ntfs (binary,auto)
    C: on /cygdrive/c type ntfs (binary,noacl,posix=0,user)

noacl seems to be ineffective:

    basin AT basin /cygdrive/c/63/c
    $ rm -f aaa bbb; touch aaa; cmd /c "echo.>bbb"

    basin AT basin /cygdrive/c/63/c
    $ cacls bbb
    C:\63\c\bbb BUILTIN\:(ID)F
                NT AUTHORITY\:(ID)F
                BUILTIN\:(ID)R
                NT AUTHORITY\ :(ID)C

    $ cacls aaa
    C:\63\c\aaa NULL SID:(DENY)(special access:)
                         READ_CONTROL
                         FILE_WRITE_EA
                         FILE_EXECUTE
                         FILE_DELETE_CHILD
    ...

There's no suspicious $CYG* env var. I also tried to kill all cygwin processes and umount everything manually. I don't see what's wrong.

Had to change the parent mount point to /cygnoacl in /etc/fstab.d/$USER and from there it works.

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple