On Apr 15 09:46, Houder wrote:
> %% getfacl alfa
> # file: alfa
> # owner: Test
> # group: None
> user::r--
> group::rw-
> other:---
> 
> %% icacls.sh alfa
> E:/Cygwin-test/home/Test/alfa
>    Owner: Test, Group: None
>    NULL SID                           (DENY)(Rc,S)
>    Seven\Test                         (DENY)(S,WD,AD,WEA,DC)
>    Seven\Test                         (R,D,WDAC,WO,WA)
>    Seven\None                         (R,W)
>    Everyone                           (Rc,S,RA)
> Successfully processed 1 files; Failed processing 0 files
> 
> %% ls -ld .
> drwxr-xr-x+ 1 Test None 0 Apr 14 19:39 .
> 
> %% getfacl .
> # file: .
> # owner: Test
> # group: None
> user::rwx
> group::r-x
> other:r-x
> default:user::rwx
> default:group::r-x
> default:other:r-x
> 
> %% icacls.sh .
> E:/Cygwin-test/home/Test/
>    Owner: Test, Group: None
>    NULL SID                           (DENY)(Rc,S)
>    Seven\Test                         (F)
>    Seven\None                         (RX)
>    Everyone                           (RX)
>    NULL SID                           (OI)(CI)(IO)(DENY)(Rc,S)
>    CREATOR OWNER                      (OI)(CI)(IO)(F)
>    CREATOR GROUP                      (OI)(CI)(IO)(RX)
>    Everyone                           (OI)(CI)(IO)(RX)
> Successfully processed 1 files; Failed processing 0 files
> 
> Whether or not the DACLs of file alfa and parent directory make sense, I must
> rely on your wisdom ...

They do look good to me.  I'm just wondering if I shouldn't drop the
NULL ACE if there's neither one of the special POSIX permission bits
(S_ISUID, S_ISGID, S_ISVTX) nor a CLASS_OBJ.  Hmm.


Thanks,
Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat