From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mout.kundenserver.de (mout.kundenserver.de [217.72.192.73]) by sourceware.org (Postfix) with ESMTPS id 70311385842C for ; Wed, 5 Jan 2022 11:34:26 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org 70311385842C Authentication-Results: sourceware.org; dmarc=fail (p=none dis=none) header.from=cygwin.com Authentication-Results: sourceware.org; spf=fail smtp.mailfrom=cygwin.com Received: from calimero.vinschen.de ([24.134.7.25]) by mrelayeu.kundenserver.de (mreue109 [212.227.15.183]) with ESMTPSA (Nemesis) id 1M7auJ-1n1WqY1vDR-0081h5; Wed, 05 Jan 2022 12:34:23 +0100 Received: by calimero.vinschen.de (Postfix, from userid 500) id DCE1CA80EDB; Wed, 5 Jan 2022 12:34:22 +0100 (CET) Date: Wed, 5 Jan 2022 12:34:22 +0100 From: Corinna Vinschen To: cygwin@cygwin.com Subject: Re: Duplicate ACLs? - Can't copy file even with Admin permissions Message-ID: Reply-To: cygwin@cygwin.com Mail-Followup-To: cygwin@cygwin.com, cygwin@kosowsky.org References: <25043.7019.643488.389876@consult.pretender> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline In-Reply-To: <25043.7019.643488.389876@consult.pretender> X-Provags-ID: V03:K1:T9RcnAbJq3oRvjKA/mMGMv2n7MRquNOx+dk4AJIH78g9Y7yBMiI sn6SHM/V5+uKkPvo5qLT4liuAFc2bMEDCqBZMiKRakk/FoBOsw2RHvvFb3JnEs811pjgBNT ibdko0qUZJKoyDV/BzNCFQGCpJzEEG0MqtHyRQLfYaJLRpwGaS74c3cHRn0DcVfJPqvm2gB MhHetsgc5tCmKDQXCFxCg== X-UI-Out-Filterresults: notjunk:1;V03:K0:SbCvVB4XmL4=:0+QDoREoPchN4+bHENMcu/ hOlq3YsdH9bAZK+DfLF92OrskM1BsRAB9Uet7hX6rOgFv6eGq1c1vnS9dDtepK/ZJ6FjsMY/k jCk7O8IqupIvVfUEe8Ss7YF/PMsSvL1QYsDTxDCG9+r1j3BbTfGKQDSGhNyLyDxBwuA2r/VIi 8qv8p/hsP2ocbvJZWqe/MzyhNN/mWn4NUWKiu6ZiChnZlvmMjZAMU+u5XjQ+UQ1eFIzgJ/b7Z zlYsrCPbWfgjqf96+o4QO4j6izxyZ2ltuO54nxpxf15TaJ6q/m0/uXWxE1fIM/JcoQJzMFjUT vp16/6deoMh28BsQcmYSDtQ5zk9ViiVOfdaSQNcOydAgaIdiKN1SWXWOgbeaZ26vpwKk3ISAZ h86jIxUp1M/XDBHB5VtAcMh0U7Z3edEph/tXMxKLqzDETP5+Papp5dvIpNVE8INi91x/gIepV CrdPDQI7opSBIolWbseWQ4u24h4bk4umaaAOxSL+8ZiZAK+dQyBbxM3aVOYYG4Tmjgl5xmviO PsJTvNlRAApOFsAdWuUTH83GVZ1Eocull5mRzn36FA2/iTuvWMTN2mUso8ZchePfPO2UGby0c dlXJRXlwKGkLUM0AhRRngtLOcsH1RWIYQYyAuA2fy6ojMbQ0B6ynwkX2xw4hSvDqWtEZpJJBp 2XtdJ22TIG7VNNUGlXIrBy9S8HidtGRLYalxPaDQw7x15GC/JY7f96J1Rpw9aB7TToeAo0mF4 vaj8AqvbPIW887M6 X-Spam-Status: No, score=-79.2 required=5.0 tests=BAYES_00, GOOD_FROM_CORINNA_CYGWIN, KAM_DMARC_NONE, KAM_DMARC_STATUS, RCVD_IN_DNSWL_NONE, RCVD_IN_MSPIKE_H4, RCVD_IN_MSPIKE_WL, SPF_FAIL, SPF_HELO_NONE, TXREP autolearn=ham autolearn_force=no version=3.4.4 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on server2.sourceware.org X-BeenThere: cygwin@cygwin.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: General Cygwin discussions and problem reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 05 Jan 2022 11:34:27 -0000 On Jan 3 10:51, cygwin@kosowsky.org wrote: > I have a file: /c/Config.Msi/3da9e136.rbf that I cannot copy, even when > [...] > # getfacl 3da9e136.rbf > # file: 3da9e136.rbf > # owner: Administrators > # group: SYSTEM > user::rwx > group::rwx > other::r-x > user::rwx > group::rwx > group:SYSTEM:rwx > mask::rwx > other::r-x > [...] > Note that 'subinacl' shows: > ================================= > +File C:\Config.Msi\3da9e136.rbf > ================================= > /control=0x0 > /owner =builtin\administrators > /primary group =system > /audit ace count =0 > /perm. ace count =3 > /pace =system Type=0x0 Flags=0x3 AccessMask=0x1f01ff > /pace =everyone Type=0x0 Flags=0x3 AccessMask=0x1200a9 > /pace =builtin\administrators Type=0x0 Flags=0x3 AccessMask=0x1f01ff I don't see a reliable, trustable source for downloading subinacl, so let's do this with builtin tools. I'm not sure what's going on on your machine. I tried to reproduce your issue by creating a file with the exact same DACL: $ cat aclfile.sav acltest D:P(A;;FA;;;SY)(A;;0x1200a9;;;WD)(A;;FA;;;BA) Note that the file is in UTF-16, the first two bytes are the BOM. $ icacls . /restore aclfile.sav processed file: .\acltest Successfully processed 1 files; Failed processing 0 files $ icacls acltest acltest NT AUTHORITY\SYSTEM:(F) Everyone:(RX) BUILTIN\Administrators:(F) Successfully processed 1 files; Failed processing 0 files $ getfacl acltest # file: acltest # owner: Administrators # group: SYSTEM user::rwx group::rwx other::r-x Would you mind to run `icacls 3da9e136.rbf /save 3da9e136.acl and paste the content of 3da9e136.acl into your reply? Please use "reply-to" to keep mail threading intact. Your two mails in terms of this problem are disconnected for some reason. Thanks, Corinna