public inbox for cygwin@cygwin.com
 help / color / mirror / Atom feed
From: mihau <mh@mihau.de>
To: cygwin@cygwin.com
Subject: Re: wget seemingly modifies file access permissions on XP
Date: Wed, 30 Mar 2016 17:55:00 -0000	[thread overview]
Message-ID: <56FC1309.9050907@mihau.de> (raw)
In-Reply-To: <20160330164413.GA13190@calimero.vinschen.de>

[-- Attachment #1: Type: text/plain, Size: 1862 bytes --]


> > unfortunately, this did not help, not even after a reboot.
>
> Did not help with what?

sorry if this wasn't specific enough.
"this did not help" meant the behavior described in the original message did not
change at all; cygwin wget works like before and - in comparison to mingw wget -
messes up the file permissions.

> Don't try to second guess the created ACL, please.
> What command do you call, and how does the ACL look afterwards?
> Please send both, icacls and getfacl output of the created ACL.

attached output from both, as I don't have icacls on my system - a little
websearch revealed it was introduced with Vista - I have included cacls
output instead if this is of any help.
(legend:
index1.html was downloaded with wget cygwin,
index2.html was downloaded with wget mingw)

> Btw., if you wget a file it's *supposed* to be non-executable.  Assuming
> your umask is 0022, the file will be create with 0644 permissions.  The
> default ACL created in this case explicitely disables execution for the
> admin user if the admin user is part of the ACL.  Just run `chmod +x'
> afterwards if that's the only problem.

I specifically meant exe as in windows executables, files w/ .exe suffix;
just tried "chmod +x" and you are correct, it works, my helloworld.exe
became executable indeed. thank you for that.

any idea why wget cygwin interferes with those things though?
in my understanding it should just copy/save a file from a remote server
to a local computer, without even touching file permissions or such.
several windows batch files which I use now, either have to be edited
and "chmod +x" added in all of them - or I'll just stick with wget mingw.

it's just that I wonder why this didn't happen before, maybe it's my fault
because I had replaced wget cygwin with wget mingw years ago? to be honest,
I don't remember.

greetings
Michael

[-- Attachment #2: index1_html_cacls_output.txt --]
[-- Type: text/plain, Size: 3754 bytes --]

C:\~\index1.html NULL SID:(DENY)(special access:)
                          READ_CONTROL
                          FILE_EXECUTE
                          FILE_DELETE_CHILD
 
                 DEEPBLUE\Administrator:(special access:)
                                        STANDARD_RIGHTS_ALL
                                        DELETE
                                        READ_CONTROL
                                        WRITE_DAC
                                        WRITE_OWNER
                                        SYNCHRONIZE
                                        STANDARD_RIGHTS_REQUIRED
                                        FILE_GENERIC_READ
                                        FILE_GENERIC_WRITE
                                        FILE_READ_DATA
                                        FILE_WRITE_DATA
                                        FILE_APPEND_DATA
                                        FILE_READ_EA
                                        FILE_WRITE_EA
                                        FILE_READ_ATTRIBUTES
                                        FILE_WRITE_ATTRIBUTES
 
                 NT AUTHORITY\SYSTEM:(DENY)(special access:)
                                     FILE_EXECUTE
 
                 BUILTIN\Administrators:(DENY)(special access:)
                                        FILE_EXECUTE
 
                 BUILTIN\Users:(DENY)(special access:)
                               FILE_EXECUTE
 
                 DEEPBLUE\None:(special access:)
                               READ_CONTROL
                               SYNCHRONIZE
                               FILE_GENERIC_READ
                               FILE_READ_DATA
                               FILE_READ_EA
                               FILE_READ_ATTRIBUTES
 
                 NT AUTHORITY\SYSTEM:(special access:)
                                     READ_CONTROL
                                     SYNCHRONIZE
                                     FILE_GENERIC_READ
                                     FILE_GENERIC_WRITE
                                     FILE_GENERIC_EXECUTE
                                     FILE_READ_DATA
                                     FILE_WRITE_DATA
                                     FILE_APPEND_DATA
                                     FILE_READ_EA
                                     FILE_WRITE_EA
                                     FILE_EXECUTE
                                     FILE_READ_ATTRIBUTES
                                     FILE_WRITE_ATTRIBUTES
 
                 BUILTIN\Administrators:(special access:)
                                        READ_CONTROL
                                        SYNCHRONIZE
                                        FILE_GENERIC_READ
                                        FILE_GENERIC_WRITE
                                        FILE_GENERIC_EXECUTE
                                        FILE_READ_DATA
                                        FILE_WRITE_DATA
                                        FILE_APPEND_DATA
                                        FILE_READ_EA
                                        FILE_WRITE_EA
                                        FILE_EXECUTE
                                        FILE_READ_ATTRIBUTES
                                        FILE_WRITE_ATTRIBUTES
 
                 BUILTIN\Users:R 
                 Everyone:(special access:)
                          READ_CONTROL
                          SYNCHRONIZE
                          FILE_GENERIC_READ
                          FILE_READ_DATA
                          FILE_READ_EA
                          FILE_READ_ATTRIBUTES
 


[-- Attachment #3: index1_html_getfacl_output.txt --]
[-- Type: text/plain, Size: 201 bytes --]

# file: index1.html
# owner: Administrator
# group: None
user::rw-
group::r--
group:SYSTEM:rwx	#effective:rw-
group:Administrators:rwx	#effective:rw-
group:Users:r-x	#effective:r--
mask:r--
other:r--


[-- Attachment #4: index2_html_cacls_output.txt --]
[-- Type: text/plain, Size: 166 bytes --]

C:\~\index2.html DEEPBLUE\Administrator:F 
                 BUILTIN\Administrators:F 
                 NT AUTHORITY\SYSTEM:F 
                 BUILTIN\Users:R 


[-- Attachment #5: index2_html_getfacl_output.txt --]
[-- Type: text/plain, Size: 156 bytes --]

# file: index2.html
# owner: Administrator
# group: None
user::rwx
group::---
group:SYSTEM:rwx
group:Administrators:rwx
group:Users:r-x
mask:r-x
other:---


[-- Attachment #6: Type: text/plain, Size: 218 bytes --]

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

  reply	other threads:[~2016-03-30 17:55 UTC|newest]

Thread overview: 8+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2016-03-30 16:28 mihau
2016-03-30 16:44 ` Corinna Vinschen
2016-03-30 17:55   ` mihau [this message]
2016-03-30 20:05     ` Andrey Repin
2016-03-31 14:01     ` Corinna Vinschen
  -- strict thread matches above, loose matches on Subject: below --
2016-03-30 14:39 mihau
2016-03-30 15:09 ` Corinna Vinschen
2016-03-31 17:51 ` Herbert Stocker

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=56FC1309.9050907@mihau.de \
    --to=mh@mihau.de \
    --cc=cygwin@cygwin.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).