public inbox for cygwin@cygwin.com
 help / color / mirror / Atom feed
From: Corinna Vinschen <corinna-cygwin@cygwin.com>
To: cygwin@cygwin.com
Subject: Re: POSIX permission mapping and NULL SIDs
Date: Mon, 27 Jun 2016 13:20:00 -0000	[thread overview]
Message-ID: <20160627102908.GB8258@calimero.vinschen.de> (raw)
In-Reply-To: <D3930943.96B5%billziss@navimatics.com>

[-- Attachment #1: Type: text/plain, Size: 1446 bytes --]

On Jun 24 23:03, Bill Zissimopoulos wrote:
> On 6/24/16, 3:53 PM, "cygwin-owner@cygwin.com on behalf of Bill
> Zissimopoulos" <cygwin-owner@cygwin.com on behalf of
> billziss@navimatics.com> wrote:
> 
> 
> >One caveat is that Cygwin already maps S-1-5-7 to uid 7. So does that mean
> >that 7==nobody in Cygwin’s case?
> 
> Here is output from Cygwin/SSHFS after mapping “nobody/nogroup” to S-1-5-7:
> <<
> billziss@windows:~$ cd /cygdrive/y
> billziss@windows:/cygdrive/y$ ls -la
> total 8
> drwxr-xr-x 1 billziss ANONYMOUS LOGON  0 Jun 23 23:57 .
> dr-xr-xr-x 1 billziss None             0 Jun 24 15:56 ..
> -rw-r--r-- 1 billziss ANONYMOUS LOGON 15 Jun 23 23:57 Foo.txt
> billziss@windows:/cygdrive/y$ cacls Foo.txt /S
> Y:\Foo.txt 
> "D:P(A;;0x1f019f;;;S-1-5-21-383059176-2062642591-2866287538-1001)(A;;FR;;;A
> N)(A;;FR;;;WD)"
> 
> billziss@windows:/cygdrive/y$ ls -lna
> total 8
> drwxr-xr-x 1 197609      7  0 Jun 23 23:57 .
> dr-xr-xr-x 1 197609 197121  0 Jun 24 15:58 ..
> -rw-r--r-- 1 197609      7 15 Jun 23 23:57 Foo.txt
> billziss@windows:/cygdrive/y$
> 
> >>
> 
> 
> Opinions?

Let's better not use anonymous.  It could be a security risk.  It might
not do harm, but it also might give unwanted access rights in some
scenarios.


Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 819 bytes --]

  reply	other threads:[~2016-06-27 10:29 UTC|newest]

Thread overview: 23+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2016-06-24 19:02 Bill Zissimopoulos
2016-06-24 21:37 ` Corinna Vinschen
2016-06-24 22:00   ` Corinna Vinschen
2016-06-24 22:06   ` Bill Zissimopoulos
2016-06-24 22:31     ` Corinna Vinschen
2016-06-24 22:36       ` Erik Soderquist
2016-06-24 23:03         ` Bill Zissimopoulos
2016-06-24 23:51           ` Bill Zissimopoulos
2016-06-27 13:20             ` Corinna Vinschen [this message]
2016-06-24 22:53       ` Bill Zissimopoulos
2016-06-25 17:10       ` Brian Inglis
2016-06-27 10:26       ` Bill Zissimopoulos
2016-06-27 10:29         ` Andrey Repin
2016-06-27 12:06           ` Corinna Vinschen
2016-06-27 20:31             ` Bill Zissimopoulos
2016-06-28 11:08               ` Corinna Vinschen
2016-06-28 19:17                 ` Bill Zissimopoulos
2016-06-28 19:17                   ` John Ruckstuhl
2016-06-29  8:43                   ` Corinna Vinschen
2016-06-29 15:14                     ` Corinna Vinschen
2016-06-29 16:06                       ` Corinna Vinschen
2016-06-30  9:26                     ` Bill Zissimopoulos
2016-06-30 14:15                       ` Corinna Vinschen

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20160627102908.GB8258@calimero.vinschen.de \
    --to=corinna-cygwin@cygwin.com \
    --cc=cygwin@cygwin.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).