From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <kasper93@gmail.com>
Received: from mail-lj1-x231.google.com (mail-lj1-x231.google.com
 [IPv6:2a00:1450:4864:20::231])
 by sourceware.org (Postfix) with ESMTPS id 34D0F385E006
 for <cygwin@cygwin.com>; Fri, 27 Mar 2020 02:41:47 +0000 (GMT)
DMARC-Filter: OpenDMARC Filter v1.3.2 sourceware.org 34D0F385E006
Received: by mail-lj1-x231.google.com with SMTP id t17so8665292ljc.12
 for <cygwin@cygwin.com>; Thu, 26 Mar 2020 19:41:47 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20161025;
 h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
 bh=dqCNx3DfU9xc3mQWfEE2jAMo4ztxZVXFlkN1Da1ASmo=;
 b=dmZJjXUJlIHGaO859a+lZM8DI8V7GKq1nO/8P4Tg5u9JFFHH0djd9NI/jjPs4DlROH
 CLeChSxikE7oaFgov7tbCzkGc5fXXoeBgiJLuE+sv9z4QCPqpTH4vlpBQL9I8EEfwS8s
 pq1z6dRAjaytsy/HXTFnRfJMFTKHxR370vESTavBl+tmyJJUreSME6t67TggC0gq2+DZ
 GRZyY+S2IdI3SWH+AO8oFZfjLg6BWxLVmlbNHZ8z/tiVKybqhIgHmZr4Eca/HBQZwFEX
 vts1aF5x7JEW7RwZJJdsXHVWcKKx+YctjnoKxZTBqK529gs1JvvpIFEr1j0YkmA9/aZM
 gIqw==
X-Gm-Message-State: ANhLgQ14g7k33DE6gz49tUoVVXAcu3BWad6SoWLoZMszbqM8LnAnMz1/
 kl90neExhwp3weVXF/p6xzfMMABij1ezCt709dycSsaZ
X-Google-Smtp-Source: APiQypLJxz05uYDFfdW3TEnh5DwCfYunML7TNJ7uKIZSzdygjzV8xlXkOL4oTYfADNMGleysRB0GGwEJHcO4tTdLTNM=
X-Received: by 2002:a2e:9013:: with SMTP id h19mr7075370ljg.101.1585276905562; 
 Thu, 26 Mar 2020 19:41:45 -0700 (PDT)
MIME-Version: 1.0
From: Kacper Michajlow <kasper93@gmail.com>
Date: Fri, 27 Mar 2020 03:41:35 +0100
Message-ID: <CABPLASQZ+g7juLdwd_z=GEqdtga2AcS4P6_E8P4SKDas0+KiwQ@mail.gmail.com>
Subject: ACL: Why SYSTEM doesn't have full access set on newly created files?
To: cygwin@cygwin.com
X-Spam-Status: No, score=-2.7 required=5.0 tests=BAYES_00, DKIM_SIGNED,
 DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, FREEMAIL_ENVFROM_END_DIGIT,
 FREEMAIL_FROM, HTML_MESSAGE, RCVD_IN_DNSWL_NONE, SPF_HELO_NONE, SPF_PASS,
 TXREP autolearn=ham autolearn_force=no version=3.4.2
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on
 server2.sourceware.org
Content-Type: text/plain; charset="UTF-8"
X-Content-Filtered-By: Mailman/MimeDel 2.1.29
X-BeenThere: cygwin@cygwin.com
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Unsubscribe: <http://cygwin.com/mailman/options/cygwin>,
 <mailto:cygwin-request@cygwin.com?subject=unsubscribe>
List-Archive: <http://cygwin.com/pipermail/cygwin/>
List-Post: <mailto:cygwin@cygwin.com>
List-Help: <mailto:cygwin-request@cygwin.com?subject=help>
List-Subscribe: <http://cygwin.com/mailman/listinfo/cygwin>,
 <mailto:cygwin-request@cygwin.com?subject=subscribe>
X-List-Received-Date: Fri, 27 Mar 2020 02:41:48 -0000

Hi,

I know that Cygwin tries to emulate UNIX permissions using ACL. But I don't
understand why SYSTEM doesn't have Full Control allowed or even modify.
Shouldn't generally SYSTEM have access to everything?

I have cloned git repository of UWP application, and deployment fails in VS
with error:
"DEP0700: Registration of the app failed. [0x80070005] Deployment Register
operation with target volume F: on Package ... from:  (AppxManifest.xml)
 failed with error 0x80070005."
It is easily fixable by adding Full Control for SYSTEM on all files, but
that wasn't my first idea, so it took some time :) Long story short, it
fails and might be not obvious for the user why, at the first glance.

Also when accessing ACL from Explorer it throws:
"The permissions on <directory> are incorrectly ordered, which may cause
some entries to be ineffective."
And forces me to reorder them if I want to edit.

That said, I have three questions:
1. Could Cygwin by default give SYSTEM full control? If not, why?
2. Could Cygwin put ACL in order, so Windows doesn't complain about it?
3. Do we need "NULL SID" entry?

-Kacper