From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 52385 invoked by alias); 20 Mar 2015 15:22:36 -0000 Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Received: (qmail 52371 invoked by uid 89); 20 Mar 2015 15:22:35 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: Yes, score=5.0 required=5.0 tests=AWL,BAYES_05,FREEMAIL_FROM,KAM_FROM_URIBL_PCCC,RCVD_IN_DNSWL_LOW,SPF_PASS autolearn=no version=3.3.2 X-HELO: mail-yk0-f176.google.com Received: from mail-yk0-f176.google.com (HELO mail-yk0-f176.google.com) (209.85.160.176) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with (AES128-GCM-SHA256 encrypted) ESMTPS; Fri, 20 Mar 2015 15:22:34 +0000 Received: by ykfs63 with SMTP id s63so44080382ykf.2 for ; Fri, 20 Mar 2015 08:22:32 -0700 (PDT) X-Received: by 10.52.52.136 with SMTP id t8mr84769548vdo.49.1426864952176; Fri, 20 Mar 2015 08:22:32 -0700 (PDT) MIME-Version: 1.0 Received: by 10.52.104.11 with HTTP; Fri, 20 Mar 2015 08:21:52 -0700 (PDT) In-Reply-To: <550C3418.9060506@thales-esecurity.com> References: <550C3418.9060506@thales-esecurity.com> From: Rexdf Date: Fri, 20 Mar 2015 18:05:00 -0000 Message-ID: Subject: Re: after update to cygwin 1.7.35(0.287/5/3) all file permissions in cygwin are 070 To: cygwin@cygwin.com Content-Type: text/plain; charset=UTF-8 X-IsSubscribed: yes X-SW-Source: 2015-03/txt/msg00363.txt.bz2 > > You may have misread the original question (and its subject): the POSIX > permissions are 070, not (0)700. These files are accessible to one or more > of the groups the owner is a member of, but not to the owner. > I know clear about 070 and 700 and 0700. It is typos. That is why I ask you to run icacls. > +1 for the ICACLS workaround though. I was bit by this recently when > setting up openssh, which cares about locking down access to keys. I needed > to get rid of those group access bits, but chmod left them unchanged. I > used ICACLS to remove ACEs for 'NT AUTHORITY\SYSTEM', which (based on > experimenting) were affecting the 'group' triplet of the POSIX permissions. > Run mintty.exe as Administrators. You can set permission by chmod setfacl https://cygwin.com/cygwin-ug-net/using-utils.html#setfacl too. If you try to remove some old account(like reinstall a new windows), you can try SubInACL http://www.microsoft.com/en-us/download/details.aspx?id=23510 to deal with SSID (something like S-1-5-21-56246481-4602087933-3644394174-1001) -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple