From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 59486 invoked by alias); 20 Mar 2015 14:52:15 -0000 Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Received: (qmail 59471 invoked by uid 89); 20 Mar 2015 14:52:15 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=1.8 required=5.0 tests=AWL,BAYES_50,RCVD_IN_DNSWL_LOW,SPF_HELO_PASS,SPF_PASS autolearn=ham version=3.3.2 X-HELO: mail1.bemta3.messagelabs.com Received: from mail1.bemta3.messagelabs.com (HELO mail1.bemta3.messagelabs.com) (195.245.230.169) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with (AES256-SHA encrypted) ESMTPS; Fri, 20 Mar 2015 14:52:13 +0000 Received: from [85.158.137.68] by server-9.bemta-3.messagelabs.com id 99/EF-01814-9143C055; Fri, 20 Mar 2015 14:52:09 +0000 X-Env-Sender: Tim.Magee@thales-esecurity.com X-Msg-Ref: server-8.tower-31.messagelabs.com!1426863128!14114147!1 X-StarScan-Received: X-StarScan-Version: 6.13.4; banners=-,-,- X-VirusChecked: Checked Received: (qmail 11700 invoked from network); 20 Mar 2015 14:52:09 -0000 Received: from mail-gate.ncipher.com (HELO mail-gate.ncipher.com) (82.108.130.23) by server-8.tower-31.messagelabs.com with DHE-RSA-AES256-SHA encrypted SMTP; 20 Mar 2015 14:52:09 -0000 Received: from outlook.ncipher.com (exchange-uk01.ncipher.com [172.19.133.94]) by mail-gate.ncipher.com (8.13.8/8.13.8) with ESMTP id t2KEq8jb028594 for ; Fri, 20 Mar 2015 14:52:08 GMT Received: from [172.23.135.192] (172.23.135.192) by exchange-uk01.ncipher.com (172.19.133.94) with Microsoft SMTP Server (TLS) id 8.3.389.2; Fri, 20 Mar 2015 14:52:08 +0000 Message-ID: <550C3418.9060506@thales-esecurity.com> Date: Fri, 20 Mar 2015 15:03:00 -0000 From: Tim Magee User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.4.0 MIME-Version: 1.0 To: cygwin@cygwin.com Subject: Re: after update to cygwin 1.7.35(0.287/5/3) all file permissions in cygwin are 070 References: In-Reply-To: Content-Type: text/plain; charset="utf-8"; format=flowed Content-Transfer-Encoding: 7bit X-IsSubscribed: yes X-SW-Source: 2015-03/txt/msg00361.txt.bz2 Hi, You may have misread the original question (and its subject): the POSIX permissions are 070, not (0)700. These files are accessible to one or more of the groups the owner is a member of, but not to the owner. +1 for the ICACLS workaround though. I was bit by this recently when setting up openssh, which cares about locking down access to keys. I needed to get rid of those group access bits, but chmod left them unchanged. I used ICACLS to remove ACEs for 'NT AUTHORITY\SYSTEM', which (based on experimenting) were affecting the 'group' triplet of the POSIX permissions. Cheers, Tim On 20/03/15 13:15, Rexdf wrote: >> i have been using cygwin for many years and currently most of my >> systems are at 1.7.32(0.274/5/3). >> i had to get an update to cygwin/X which forced me to also update >> cygwin. with the update, nearly all windows files have the permission >> setting of 070 (---rwx---) even when the file is owned by me, and as a >> consequence most applications fail to load or cannot load dll's or >> other really annoying issues. >> >> is there some "magical" new setting to make cygwin recognize that >> files owned by me are at least r/w? >> > > I don't know what is your situation, but i can give some suggestion. > > AFAIK, 1.7.34+ seems to use the real Windows ACL ( at least partly). > It means that the 700 file really cannot access by other Windows > accounts. > > First of all, try the follwoing code from mintty. Then restart X. > mkpasswd -l > /etc/passwd > mkgroup -l > /etc/group > > If it is still 0700 and you right click Properties/Security from > windows explorer.exe to make sure your real Windows ACL permission is > true wrong. Then the following command may be helpful. > > Start cmd.exe as Administrators. > cd to folder contain cygwin folder. > Run following: > > takeown /F cygwin /R > icacls cygwin /T /grant your_account_name:F > > your_account_name can be get from your default cmd.exe(Run as normal > user) or maybe your cygwin mintty.exe your_account_name@your_PC_NAME > or your C:\Users\ your_account_name. > > -- > Problem reports: http://cygwin.com/problems.html > FAQ: http://cygwin.com/faq/ > Documentation: http://cygwin.com/docs.html > Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple > -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple