On Apr 13 18:10, Houder wrote:
> Hi Corinna,
> 
> Perhaps not relevant anymore (since you have returned to the drawing board) ...
> 
>  - after installing update 3 to Cygwin 2.0 ...
>  - created file while being logged on as user Test; subsequently executed: chmod 460 file
>  - switched back to user Henri and attempted to touch file: failed
>  - however, using Cygwin 1.7, and repeating the same procedure, I am able to touch the file (called file2)
> 
> Regards,
> 
> Henri
> 
>  = Cygwin 2.0 -- logged on as user Test
> 
> %% uname -a
> CYGWIN_NT-6.1-WOW Seven 2.0.0(0.287/5/3) 2015-04-12 21:09 i686 Cygwin
> %% pwd
> /home/Test
> %% id
> uid=197614(Test) gid=197121(None) groups=197121(None), ... followed by irrelevant j.
> 545(Users), 4(INTERACTIVE)66049(CONSOLE LOGON),11(Authenticated Users),15(This Organization),113(Local
> acount),4095(CurrentSession),
> 66048(LOCAL),262154(NTLM Authentication),401408(Medim Mandatory Level)
> %% touch file
> %% chmod 460 file
> %% echo aha > file
> bash: file: Permission denied
> 
> %% getfacl file
> # file: file
> # owner: Test
> # group: None
> user::r--
> group::r-x
> mask:rw-

Huh?  So it creates a mask even though it only contains standard POSIX
permissions.  This explains the "permission denied".  The group r-x
combined with a mask rw- results in effective r-- permissions for the
group None.  This yet again calls for adding the output of effective
permissions to getacl.

I think I fixed the thinko in the code.  At one point I noticed that I
mishandled the GROUP_OBJ permssions in new-style ACEs and my fix was
apparently a bit too efficient :}

I uploaded new snapshots to https://cygwin.com/snapshots/ and I'm just
uploading a 2.0.0-0.4 release.

Please give either of them a try.


Thanks,
Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat