DMARC-Filter: OpenDMARC Filter v1.4.2 delorie.com 4ABD11XT3807687
Authentication-Results: delorie.com; dmarc=pass (p=none dis=none) header.from=cygwin.com
Authentication-Results: delorie.com; spf=pass smtp.mailfrom=cygwin.com
DKIM-Filter: OpenDKIM Filter v2.11.0 delorie.com 4ABD11XT3807687
Authentication-Results: delorie.com;
	dkim=pass (1024-bit key, unprotected) header.d=cygwin.com header.i=@cygwin.com header.a=rsa-sha256 header.s=default header.b=g4yj7SPm
X-Recipient: archive-cygwin AT delorie DOT com
DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 9A18D3858C53
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com;
	s=default; t=1731330059;
	bh=JJU9epC69zrofI2oS0Bbb7aSjMKhOYgdtE2OzRVGWOc=;
	h=Date:To:Subject:In-Reply-To:References:List-Id:List-Unsubscribe:
	 List-Archive:List-Post:List-Help:List-Subscribe:From:Reply-To:
	 From;
	b=g4yj7SPmhmuQH/xv1G5m/8/CIe0Oq+sV7gRwQGRawXxo6Hv5sjQX0o5Gor1p/PIPI
	 eIPu9iK02f8izE3BJXDCG/HSN4e37P22ycSS72udcrcqM1qOto/XTjiSN66fYeX9Sd
	 4Y3z6HvKPuJ6HbFfRaVtV0Q4uk7yd9GGAWUvTvCk=
X-Original-To: cygwin AT cygwin DOT com
Delivered-To: cygwin AT cygwin DOT com
DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 130FF3858D28
ARC-Filter: OpenARC Filter v1.0.0 sourceware.org 130FF3858D28
ARC-Seal: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1731330037; cv=none;
 b=Nn5cYCasI3NmjT/RN3irGag5NT0fyznPnUi3Fxfa5q4hIy6135hdfYlCvlXbOlMCz/EUL9MU1s4mJJSJrMeYgmq8rhlCpfnMLWASIDgHWbVPlO1ZRz2nGpF4GSTK2Rd4MWLomvV/2Zwf+PL7Ci/9c83dqbLFLpTV950IfyNHYUQ=
ARC-Message-Signature: i=1; a=rsa-sha256; d=sourceware.org; s=key;
 t=1731330037; c=relaxed/simple;
 bh=9NYCKznXCi71FGpzT26gb2A9fquFUC72WbPkDyCbkBI=;
 h=Date:From:To:Subject:Message-Id:Mime-Version:DKIM-Signature;
 b=xSlfuxP37WS9MaxTf2nLmXYRcP+fDJ0Jui9eygwl9V9tcEJ5sUrBpnPUbhMLAT+e5008GA775r8H18CucO2bajDMDhpfYSID0kfeUNA+h6jdBekk854LrfKCym+qDG/cj8i0Tl69781enUg9ApsxKcJHnSvRQRnYxkVdGQ65bps=
ARC-Authentication-Results: i=1; server2.sourceware.org
Date: Mon, 11 Nov 2024 22:00:30 +0900
To: cygwin AT cygwin DOT com
Subject: Re: SMBFS mount's file cannot be made executable
Message-Id: <20241111220030.f872264d5c9186e997213513@nifty.ne.jp>
In-Reply-To: <ZzHxrUTHKYSTXrwE@calimero.vinschen.de>
References: <BL0PR0901MB430827F1A0668E468B498FBBA5D70 AT BL0PR0901MB4308 DOT namprd09 DOT prod DOT outlook DOT com>
 <20241108205109 DOT 55f99e2d172b9fc87e92ae67 AT nifty DOT ne DOT jp>
 <Zy4ODHHpmZPggGSz AT calimero DOT vinschen DOT de>
 <20241111193152 DOT c3a81044a03ecf2093185166 AT nifty DOT ne DOT jp>
 <ZzHizX_6FXABDPvZ AT calimero DOT vinschen DOT de>
 <20241111201928 DOT 811a2f8f09142b7aa8fe9bdc AT nifty DOT ne DOT jp>
 <ZzHxrUTHKYSTXrwE AT calimero DOT vinschen DOT de>
X-Mailer: Sylpheed 3.7.0 (GTK+ 2.24.30; i686-pc-mingw32)
Mime-Version: 1.0
X-BeenThere: cygwin AT cygwin DOT com
X-Mailman-Version: 2.1.30
Precedence: list
List-Id: General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Unsubscribe: <https://cygwin.com/mailman/options/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=unsubscribe>
List-Archive: <https://cygwin.com/pipermail/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe: <https://cygwin.com/mailman/listinfo/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
From: Takashi Yano via Cygwin <cygwin AT cygwin DOT com>
Reply-To: Takashi Yano <takashi DOT yano AT nifty DOT ne DOT jp>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: cygwin-bounces~archive-cygwin=delorie DOT com AT cygwin DOT com
Sender: "Cygwin" <cygwin-bounces~archive-cygwin=delorie DOT com AT cygwin DOT com>

On Mon, 11 Nov 2024 12:59:41 +0100
Corinna Vinschen wrote:
> On Nov 11 20:19, Takashi Yano via Cygwin wrote:
> > On Mon, 11 Nov 2024 11:56:13 +0100
> > Corinna Vinschen wrote:
> > 
> > > On Nov 11 19:31, Takashi Yano via Cygwin wrote:
> > > > On Fri, 8 Nov 2024 14:11:40 +0100
> > > > Corinna Vinschen wrote:
> > > > > If the server is a Samba share, check if `force unknown acl user = yes'
> > > > > and for the share itself, check that
> > > > > 
> > > > >   read only = No
> > > > >   vfs objects = acl_xattr
> > > >     ^^^^^^^^^^^^^^^^^^^^^^^
> > > > Thanks! This makes things better.
> > > > At least x permissions are set to executable compiled by gcc.
> > > > 
> > > > However, something is still wrong in my environment....
> > > > Others permission seems to be reffered in some cases.
> > > 
> > > I don't understand.  Please run icacls for a just created file on your
> > > Samba share (without the below patch) as well as Windows' `whoami /all'.
> > 
> > $ touch samba_test_file.txt
> > $ icacls samba_test_file.txt
> > samba_test_file.txt S-1-5-21-479325430-3041864944-504445739-1000:(R,W,D,WDAC,WO)
> >                     S-1-5-21-479325430-3041864944-504445739-513:(R)
> >                     Everyone:(R)
> > 
> > This seems reasonable to me.
> > 
> > For Windows 11 share, the result is
> > samba_test_file.txt NULL SID:(DENY)(Rc,S,WEA,X,DC)
> >                     S-1-5-21-2089672436-4097686843-2104605006-1001:(R,W,D,WDAC,WO)
> 
>   On Samba S-1-5-21-479325430-3041864944-504445739-1000
>   On Windows S-1-5-21-2089672436-4097686843-2104605006-1001
> 
> Isn't the user mapping off?
> 
> It's also not clear where your Windows ACL comes from.  When I check the
> permissions on typical Windows folders, Authenticated Users doesn't even
> show up.

On my machine,

C:\Users\yano>mkdir \test_folder

C:\Users\yano>icacls \test_folder
\test_folder BUILTIN\Administrators:(I)(OI)(CI)(F)
             NT AUTHORITY\SYSTEM:(I)(OI)(CI)(F)
             BUILTIN\Users:(I)(OI)(CI)(RX)
             NT AUTHORITY\Authenticated Users:(I)(M)
             NT AUTHORITY\Authenticated Users:(I)(OI)(CI)(IO)(M)

C:\Users\yano>mkdir test_folder

C:\Users\yano>icacls test_folder
test_folder NT AUTHORITY\SYSTEM:(I)(OI)(CI)(F)
            BUILTIN\Administrators:(I)(OI)(CI)(F)
            HP-Z230\yano:(I)(OI)(CI)(F)
            HP-Z230\Administrator:(I)(OI)(CI)(F)

I have no idea why the \test_folder is different from \Users\yano\test_folder.

-- 
Takashi Yano <takashi DOT yano AT nifty DOT ne DOT jp>

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple