From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from offsite.cs.fiu.edu (offsite.cs.fiu.edu [131.94.68.228]) by sourceware.org (Postfix) with ESMTP id 2C9CD3858404 for ; Mon, 11 Nov 2024 23:35:28 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 2C9CD3858404 Authentication-Results: sourceware.org; dmarc=fail (p=none dis=none) header.from=cygwin.com Authentication-Results: sourceware.org; spf=fail smtp.mailfrom=cygwin.com ARC-Filter: OpenARC Filter v1.0.0 sourceware.org 2C9CD3858404 Authentication-Results: server2.sourceware.org; arc=fail smtp.remote-ip=131.94.68.228 ARC-Seal: i=2; a=rsa-sha256; d=sourceware.org; s=key; t=1731368145; cv=fail; b=m7FjBZ7e8z45TUUIq4nlgvYGgk5es7Aunfq0FkCnGGe+YbjR/wt3J57j9v2QnW/H7lUim//oUeyjgR70HcmD1wwioEmYg54PHQLJ+O7ch4bMVbwpjg9IGHYZiMtgIfk83OnBaxEdRisbKxdOgqWcUSVnzzhZZtwkfvSryiyrpHw= ARC-Message-Signature: i=2; a=rsa-sha256; d=sourceware.org; s=key; t=1731368145; c=relaxed/simple; bh=QpIrq2TLUG85FOfQj7F1iodeegjvz2DoOpbrB6VWcns=; h=DKIM-Signature:Date:To:Subject:Message-Id:Mime-Version:From; b=TiddcVzLLk0XC9GL9XuE0vzayY43zjldmXuhGeZZbVkIO9J9uFGz1rHpcfI3QhBbSGs/+cFdYwIgntm8bb+/414wQXIWQFj+BDa1Mbx+4SqS2V8StYEtHG39YkE7bnGt9AZZhz3KXfSyZXUlV7OdyGfGEq5hYWCQEWYn4S0NGAE= ARC-Authentication-Results: i=2; server2.sourceware.org Received: by offsite.cs.fiu.edu (Postfix, from userid 0) id F19FC161834; Mon, 11 Nov 2024 18:35:17 -0500 (EST) Received: from server2.sourceware.org (server2.sourceware.org [8.43.85.97]) by offsite.cs.fiu.edu (Postfix) with ESMTP id E8688161739 for ; Mon, 11 Nov 2024 14:30:31 -0500 (EST) Received: from server2.sourceware.org (localhost [IPv6:::1]) by sourceware.org (Postfix) with ESMTP id 743163858C41 for ; Mon, 11 Nov 2024 19:30:26 +0000 (GMT) DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 743163858C41 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com; s=default; t=1731353426; bh=VfTWTVqqNDAy218RdT5wxBe+qfLLCZaBZip7m10DWUQ=; h=Date:To:Subject:In-Reply-To:References:List-Id:List-Unsubscribe: List-Archive:List-Post:List-Help:List-Subscribe:From:Reply-To: From; b=jCTNJyk7AFNl0anIOXKpPYR5Bc/ZDODywklVQqsOkLLfg3QA6QsEHnxfpZ3irEREH IaZZQ9aOCvv6GGOgtITU3DLl+n20jtcngU7Y0ANbuTWzU4lPEonDNmcHG3TkxcL4hM 80ug1UFfPABXJtjGvSLLzp2bLJusOvag/abwTMwE= Received: from mta-snd-w09.mail.nifty.com (mta-snd-w09.mail.nifty.com [106.153.227.41]) by sourceware.org (Postfix) with ESMTPS id AE8063858D28 for ; Mon, 11 Nov 2024 19:29:41 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org AE8063858D28 ARC-Filter: OpenARC Filter v1.0.0 sourceware.org AE8063858D28 ARC-Seal: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1731353385; cv=none; b=ZRj2d1HoPaMyA4obTUHZwyt8UtNyISwOg+vqHzrr6ynbZU4NZbX8OE9TFczRkecKt/ZKdkiZw0qbhAKv5cHXRSclYajqUa/iGyfT59EkTGuyBiT8pEEacEgaT/nirQQL+4jqOPZT4LWttAe7vzhD3daazct7B21FNrEivpt4gEQ= ARC-Message-Signature: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1731353385; c=relaxed/simple; bh=frcUliy05MDVJhywt4/YH/pjbjRX9SmU+7KuwFbglWY=; h=Date:From:To:Subject:Message-Id:Mime-Version:DKIM-Signature; b=dZUSCCtTOG3v7V1MD7Cfg1ShIu/k2q46PEht1PFQ91VfndkWBVhq94LSCZhrJxIu0A9DFiBWMeTcmVLZnKcoRoDWltDSwH+xJpNjB3XFLJmr30fr0EQARcWElEIaaa5itQqtcJkwnKPeGPNZEEeufX8D1rb36SkboH7GrdfOJp0= ARC-Authentication-Results: i=1; server2.sourceware.org Received: from HP-Z230 by mta-snd-w09.mail.nifty.com with ESMTP id <20241111192939050.YXOX.107569.HP-Z230@nifty.com> for ; Tue, 12 Nov 2024 04:29:39 +0900 Date: Tue, 12 Nov 2024 04:29:37 +0900 To: cygwin@cygwin.com Subject: Re: SMBFS mount's file cannot be made executable Message-ID: <20241112042937.740185a42d476993b4b1e31c@nifty.ne.jp> In-Reply-To: References: <20241108205109.55f99e2d172b9fc87e92ae67@nifty.ne.jp> <20241111193152.c3a81044a03ecf2093185166@nifty.ne.jp> <20241111201928.811a2f8f09142b7aa8fe9bdc@nifty.ne.jp> <20241111203202.b22bcf4f9030aff58299fe0e@nifty.ne.jp> <20241111204051.493f12208bb59d62b699dd28@nifty.ne.jp> <20241111211953.605b186566ce3a44ca929788@nifty.ne.jp> X-Mailer: Sylpheed 3.7.0 (GTK+ 2.24.30; i686-pc-mingw32) Mime-Version: 1.0 X-BeenThere: cygwin@cygwin.com X-Mailman-Version: 2.1.30 Precedence: list List-Id: General Cygwin discussions and problem reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , From: Takashi Yano via Cygwin Reply-To: Takashi Yano Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: cygwin-bounces~esj=cs.fiu.edu@cygwin.com Sender: "Cygwin" X-Spam-Status: No, score=-6.0 required=5.0 tests=BAYES_00,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI,NICE_REPLY_A,SPF_FAIL,SPF_HELO_NONE,TXREP autolearn=unavailable autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org Message-ID: <20241111192937.hZqf0HcorD1usDvoIPAsxq8RqWI_dl5TtsQV3WOcB-0@z> On Mon, 11 Nov 2024 14:35:55 +0100 Corinna Vinschen wrote: > On Nov 11 21:19, Takashi Yano via Cygwin wrote: > > On Mon, 11 Nov 2024 13:03:18 +0100 > > Corinna Vinschen wrote: > > > On Nov 11 20:40, Takashi Yano via Cygwin wrote: > > > > On Mon, 11 Nov 2024 20:32:02 +0900 > > > > Takashi Yano via Cygwin wrote: > > > > > Even with this patch, the file: > > > > > > > > > > yano $ touch samba_test_file.txt > > > > > yano $ ls -l samba_test_files.txt > > > > > -rw-r--r-- 1 yano yano 0 Nov 11 20:25 samba_test_file.txt > > > > > > > > Oops! This was wrong. > > > > -rw-r--r-- 1 Unknown+User Unix_Group+1000 0 Nov 11 20:25 samba_test_file.txt > > > > > > That's Samba for you. I applied your patch and created a file > > > on my share, and the Authenticated Users group was not in the > > > resulting ACL. Only user, group, and Everyone. > > > > > > Either way, I don't think this is the right thing to do. Even if > > > the group isn't added to the ACL on my machine, it still loks like > > > a security problem in waiting. > > > > Isn't this DACL here used only for access_check() (NtAccessCheck())? > > In my environment, the Authenticated Users does not appear in the ACL > > too. > > Oh, yeah, right, *blush*. > > But it's still not the right thing to do. You convert the Samba ACL > to a Windows ACL which gives Authenticated Users full permissions. > So the check_access() function will return false positives, because > every authenticated user is in the Authenticated Users group and has > supposedly FILE_ALL_ACCESS. Even if the actual function (read, write, > execute) will fail, the access() function will claim that every > authenticated user has RWX perms. Ah, right. I have just confirmed that behaviour... > AFAICS, the underlying problem is somehow the user mapping. Did you > try with username map = /foo/bar? Yes. However, my user name is 'yano' both in server (Linux) and client (Windows 10) side. So, I think there is no effect of 'username map'. -- Takashi Yano -- Problem reports: https://cygwin.com/problems.html FAQ: https://cygwin.com/faq/ Documentation: https://cygwin.com/docs.html Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple