From: Corinna Vinschen <corinna-cygwin@cygwin.com>
To: cygwin@cygwin.com
Subject: Re: Duplicate ACLs? - Can't copy file even with Admin permissions
Date: Wed, 5 Jan 2022 12:34:22 +0100 [thread overview]
Message-ID: <YdWCPsZOModGdRXM@calimero.vinschen.de> (raw)
In-Reply-To: <25043.7019.643488.389876@consult.pretender>
On Jan 3 10:51, cygwin@kosowsky.org wrote:
> I have a file: /c/Config.Msi/3da9e136.rbf that I cannot copy, even when
> [...]
> # getfacl 3da9e136.rbf
> # file: 3da9e136.rbf
> # owner: Administrators
> # group: SYSTEM
> user::rwx
> group::rwx
> other::r-x
> user::rwx
> group::rwx
> group:SYSTEM:rwx
> mask::rwx
> other::r-x
> [...]
> Note that 'subinacl' shows:
> =================================
> +File C:\Config.Msi\3da9e136.rbf
> =================================
> /control=0x0
> /owner =builtin\administrators
> /primary group =system
> /audit ace count =0
> /perm. ace count =3
> /pace =system Type=0x0 Flags=0x3 AccessMask=0x1f01ff
> /pace =everyone Type=0x0 Flags=0x3 AccessMask=0x1200a9
> /pace =builtin\administrators Type=0x0 Flags=0x3 AccessMask=0x1f01ff
I don't see a reliable, trustable source for downloading subinacl, so
let's do this with builtin tools.
I'm not sure what's going on on your machine. I tried to reproduce your
issue by creating a file with the exact same DACL:
$ cat aclfile.sav
acltest
D:P(A;;FA;;;SY)(A;;0x1200a9;;;WD)(A;;FA;;;BA)
Note that the file is in UTF-16, the first two bytes are the BOM.
$ icacls . /restore aclfile.sav
processed file: .\acltest
Successfully processed 1 files; Failed processing 0 files
$ icacls acltest
acltest NT AUTHORITY\SYSTEM:(F)
Everyone:(RX)
BUILTIN\Administrators:(F)
Successfully processed 1 files; Failed processing 0 files
$ getfacl acltest
# file: acltest
# owner: Administrators
# group: SYSTEM
user::rwx
group::rwx
other::r-x
Would you mind to run `icacls 3da9e136.rbf /save 3da9e136.acl
and paste the content of 3da9e136.acl into your reply?
Please use "reply-to" to keep mail threading intact. Your two
mails in terms of this problem are disconnected for some reason.
Thanks,
Corinna
next prev parent reply other threads:[~2022-01-05 11:34 UTC|newest]
Thread overview: 18+ messages / expand[flat|nested] mbox.gz Atom feed top
2022-01-03 15:51 cygwin
2022-01-05 11:34 ` Corinna Vinschen [this message]
2022-01-06 11:12 ` Achim Gratz
2022-01-06 21:11 ` cygwin
2022-01-07 13:22 ` Corinna Vinschen
2022-01-07 20:56 ` cygwin
2022-01-10 10:07 ` Corinna Vinschen
2022-01-10 13:46 ` Corinna Vinschen
2022-01-12 9:33 ` Corinna Vinschen
2022-01-19 2:26 ` cygwin
2022-01-19 8:00 ` Corinna Vinschen
2022-01-21 13:57 ` cygwin
2022-01-25 19:19 ` Corinna Vinschen
2022-01-26 1:11 ` cygwin
2022-01-06 18:05 ` Andrey Repin
2022-01-06 19:42 ` Franz Fehringer
2022-01-06 20:35 ` cygwin
2022-01-06 20:46 ` Eliot Moss
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=YdWCPsZOModGdRXM@calimero.vinschen.de \
--to=corinna-cygwin@cygwin.com \
--cc=cygwin@cygwin.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).