public inbox for cygwin@cygwin.com
 help / color / mirror / Atom feed
From: Corinna Vinschen <corinna-cygwin@cygwin.com>
To: cygwin@cygwin.com
Subject: Re: Duplicate ACLs? - Can't copy file even with Admin permissions
Date: Wed, 5 Jan 2022 12:34:22 +0100	[thread overview]
Message-ID: <YdWCPsZOModGdRXM@calimero.vinschen.de> (raw)
In-Reply-To: <25043.7019.643488.389876@consult.pretender>

On Jan  3 10:51, cygwin@kosowsky.org wrote:
> I have a file: /c/Config.Msi/3da9e136.rbf that I cannot copy, even when
> [...]
> 	# getfacl 3da9e136.rbf
> 	# file: 3da9e136.rbf
> 	# owner: Administrators
> 	# group: SYSTEM
> 	user::rwx
> 	group::rwx
> 	other::r-x
> 	user::rwx
> 	group::rwx
> 	group:SYSTEM:rwx
> 	mask::rwx
> 	other::r-x
> [...]
> Note that 'subinacl' shows:
> =================================
> +File C:\Config.Msi\3da9e136.rbf
> =================================
> /control=0x0
> /owner             =builtin\administrators
> /primary group     =system
> /audit ace count   =0
> /perm. ace count   =3
> /pace =system  Type=0x0 Flags=0x3 AccessMask=0x1f01ff
> /pace =everyone  Type=0x0 Flags=0x3 AccessMask=0x1200a9
> /pace =builtin\administrators  Type=0x0 Flags=0x3 AccessMask=0x1f01ff

I don't see a reliable, trustable source for downloading subinacl, so
let's do this with builtin tools.

I'm not sure what's going on on your machine.  I tried to reproduce your
issue by creating a file with the exact same DACL:

  $ cat aclfile.sav
  acltest
  D:P(A;;FA;;;SY)(A;;0x1200a9;;;WD)(A;;FA;;;BA)

Note that the file is in UTF-16, the first two bytes are the BOM.

  $ icacls . /restore aclfile.sav
  processed file: .\acltest
  Successfully processed 1 files; Failed processing 0 files
  $ icacls acltest
  acltest NT AUTHORITY\SYSTEM:(F)
	  Everyone:(RX)
	  BUILTIN\Administrators:(F)

  Successfully processed 1 files; Failed processing 0 files
  $ getfacl acltest
  # file: acltest
  # owner: Administrators
  # group: SYSTEM
  user::rwx
  group::rwx
  other::r-x

Would you mind to run `icacls 3da9e136.rbf /save 3da9e136.acl
and paste the content of 3da9e136.acl into your reply?

Please use "reply-to" to keep mail threading intact.  Your two
mails in terms of this problem are disconnected for some reason.


Thanks,
Corinna

  reply	other threads:[~2022-01-05 11:34 UTC|newest]

Thread overview: 18+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2022-01-03 15:51 cygwin
2022-01-05 11:34 ` Corinna Vinschen [this message]
2022-01-06 11:12   ` Achim Gratz
2022-01-06 21:11     ` cygwin
2022-01-07 13:22       ` Corinna Vinschen
2022-01-07 20:56       ` cygwin
2022-01-10 10:07         ` Corinna Vinschen
2022-01-10 13:46           ` Corinna Vinschen
2022-01-12  9:33             ` Corinna Vinschen
2022-01-19  2:26             ` cygwin
2022-01-19  8:00               ` Corinna Vinschen
2022-01-21 13:57                 ` cygwin
2022-01-25 19:19                   ` Corinna Vinschen
2022-01-26  1:11                     ` cygwin
2022-01-06 18:05   ` Andrey Repin
2022-01-06 19:42     ` Franz Fehringer
2022-01-06 20:35     ` cygwin
2022-01-06 20:46       ` Eliot Moss

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=YdWCPsZOModGdRXM@calimero.vinschen.de \
    --to=corinna-cygwin@cygwin.com \
    --cc=cygwin@cygwin.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).