public inbox for cygwin@cygwin.com
 help / color / mirror / Atom feed
From: Ismail Donmez <ismail@donmez.ws>
To: cygwin@cygwin.com
Subject: Re: [TESTERS needed] New POSIX permission handling
Date: Thu, 16 Apr 2015 10:20:00 -0000	[thread overview]
Message-ID: <1429179605687-117615.post@n5.nabble.com> (raw)
In-Reply-To: <20150415154225.GD7343@calimero.vinschen.de>

Hi,


Corinna Vinschen-2 wrote
> Hi Ismail,
> 
> On Apr 12 16:25, Corinna Vinschen wrote:
>> On Apr 12 06:21, İsmail Dönmez wrote:
>> > Corinna Vinschen-2 wrote
>> > > On Apr 11 10:11, donmez wrote:
>> > >> Corinna Vinschen-2 wrote
>> > >> > I just applied a patch I'm working on for quite some time now.  As
>> I
>> > >> > outlined before on this list, the POSIX permission handling has
>> aged
>> > >> > considerably and, for historical reasons, did things differently
>> > >> > dependent on the calling function.  I took the time to reimplement
>> the
>> > >> > core functionality to handle all ACLs as strictly following POSIX
>> ACL
>> > >> > rules as possible.
>> > >> 
>> > >> I tested the updated package and at least quilt and mutt seems to
>> broken
>> > >> by
>> > >> the permission changes:
>> > >> [...]
>> > > No offense, but this is not overly helpful.  The problem is to learn
>> > > *why* this happens and how to fix it.  For that I'd need to know what
>> > > your permissions on /tmp look like (ls -l, getfacl, icacls). 
>> Creating
>> > > files in my /tmp (having an old-style ACL) with the following
>> > > permissions works as desired for me:
>> > 
>> > Hopefully this will shed some more light:
>> 
>> It does, thank you.  The problem is the dreaded "owner == group" problem
>> introduced with these weird Microsoft accounts.  I completely forgot
>> about this while implementing the new code.  It's pretty tricky to get
>> the Windows ACL right for this.  Additionally the ACLs already created
>> by setup are... borderline correct only.  Back to the drawing board...
> 
> I just applied a patch which is supposed to handle this owner==group
> scenario better.
> 
> In short, Cygwin will try to handle POSIX user and group permissions
> separately, even if owner == group.  This is basically a fake as far
> as the actual permissions of the account are concerned, but it allows
> applications still to chmod to different user and group perms.  It
> just *looks* different in the end.
> 
> The only restriction of this is that the POSIX user permissions are
> always changed so that the user perms are >= the group perms in this
> situation.  So this:
> 
>   chmod 460 foo
> 
> will be internally twisted into
> 
>   chmod 660 foo
> 
> 
> I uploaded new developer snapshots to https://cygwin.com/snapshots/
> and I'm just uploading a 2.0.0-0.5 test release with this change.

I tested the new test release (rm -rfd the cygwin installation and
re-installed from scratch just to be sure), my original testcase with quilt
and mutt works, BUT now when I run make install inside mutt source it
complains that /usr/bin/install cannot change permissions on the destination
executables.

Now this is a pretty vague error report but it might take some time before I
can post an easily reproducable error. Because running the same command
myself gives no error whatsoever. I'll try to come up with a better report.

Thanks a lot!




--
View this message in context: http://cygwin.1069669.n5.nabble.com/TESTERS-needed-New-POSIX-permission-handling-tp117406p117615.html
Sent from the Cygwin list mailing list archive at Nabble.com.

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

  reply	other threads:[~2015-04-16 10:20 UTC|newest]

Thread overview: 42+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2015-04-10 10:07 Corinna Vinschen
2015-04-10 21:13 ` Warren Young
2015-04-11  9:35   ` Corinna Vinschen
2015-04-11  0:00 ` Steven Penny
2015-04-11  9:40   ` Corinna Vinschen
2015-04-11 10:07     ` Corinna Vinschen
2015-04-11 16:26       ` Ernie Rael
2015-04-12  8:22         ` Corinna Vinschen
2015-04-11 10:23     ` Corinna Vinschen
2015-04-11 10:47     ` Steven Penny
2015-04-11 14:30       ` Corinna Vinschen
2015-04-11 16:05       ` Andrey Repin
2015-04-12 17:37         ` Adam Dinwoodie
2015-05-16  2:39   ` Steven Penny
2015-05-17  7:44     ` Duncan Roe
2015-05-19  7:52     ` Jiří Engelthaler
2015-04-11  8:47 ` Achim Gratz
2015-04-11  9:02   ` David Macek
2015-04-11  9:08     ` Achim Gratz
2015-04-11  9:51       ` David Macek
2015-04-11 11:51         ` Achim Gratz
2015-04-11 10:00     ` Corinna Vinschen
2015-04-11 12:36       ` David Macek
2015-04-11 14:31         ` Corinna Vinschen
2015-04-11  9:44   ` Corinna Vinschen
2015-04-11 11:11     ` Bryan Berns
2015-04-11 14:32       ` Corinna Vinschen
2015-04-11 16:05   ` Andrey Repin
2015-04-11 17:11 ` donmez
2015-04-12  8:35   ` Corinna Vinschen
2015-04-12 13:21     ` İsmail Dönmez
2015-04-12 14:25       ` Corinna Vinschen
2015-04-15 15:42         ` Corinna Vinschen
2015-04-16 10:20           ` Ismail Donmez [this message]
2015-04-16 11:03             ` Corinna Vinschen
2015-04-16 16:09               ` Ismail Donmez
2015-04-16 16:24                 ` Corinna Vinschen
2015-04-16 16:48                   ` Ismail Donmez
2015-04-17  7:30                     ` Corinna Vinschen
2015-04-17 10:06                       ` Corinna Vinschen
2015-04-17 15:17                         ` Ismail Donmez
2015-04-17 16:22                           ` Corinna Vinschen

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1429179605687-117615.post@n5.nabble.com \
    --to=ismail@donmez.ws \
    --cc=cygwin@cygwin.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).