From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mout.kundenserver.de (mout.kundenserver.de [212.227.126.130]) by sourceware.org (Postfix) with ESMTPS id 3FF47385802B for ; Fri, 7 Jan 2022 13:22:30 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org 3FF47385802B Authentication-Results: sourceware.org; dmarc=fail (p=none dis=none) header.from=cygwin.com Authentication-Results: sourceware.org; spf=fail smtp.mailfrom=cygwin.com Received: from calimero.vinschen.de ([24.134.7.25]) by mrelayeu.kundenserver.de (mreue011 [212.227.15.167]) with ESMTPSA (Nemesis) id 1Mi2aH-1mSch12ivZ-00e2j3; Fri, 07 Jan 2022 14:22:26 +0100 Received: by calimero.vinschen.de (Postfix, from userid 500) id 80E2EA8093E; Fri, 7 Jan 2022 14:22:25 +0100 (CET) Date: Fri, 7 Jan 2022 14:22:25 +0100 From: Corinna Vinschen To: cygwin@cygwin.com Subject: Re: Duplicate ACLs? - Can't copy file even with Admin permissions Message-ID: Reply-To: cygwin@cygwin.com Mail-Followup-To: cygwin@cygwin.com, cygwin@kosowsky.org References: <25043.7019.643488.389876@consult.pretender> <8735m12k3u.fsf@Rainer.invalid> <25047.23325.33020.646017@consult.pretender> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline In-Reply-To: <25047.23325.33020.646017@consult.pretender> X-Provags-ID: V03:K1:oIBB4S6ULPRrBT4+ZO61koBFeFIY3HdVn3fiTbOID4ABWCqP8Oo 2wxqZ2Z8pNUnTkErsd17f1dC1+q4cZ7DtZymCCSeoixC5iWC4qpvbU+S3fPNZTy/Fhp8ATX QUNVyBbHmj7KdVjyghfg938N6De1y484N/cazMCsj0RhApQCBcgEd5JhjiwaVyaRN+IUBXD aY0sCYqB5efDCKIeb6AWw== X-UI-Out-Filterresults: notjunk:1;V03:K0:Z/GJq6KVgH4=:juDR+rVK2lglpHQYPd3nBg kt3JA/9LD66jSotXwsjrwOnIVF+soMWk/Xa9w9jne3f5xAJGj9i6Ajk4AtuR6pdegBrCZLmYT ABdkEZ2c3jF5Eye9E4lMtbSmCf6C0RSMhbBCev/u2ZXcQd1MerHcTaj/AOzz8Y+McxBw8KVXm /X8Lj1UgIkgZL15ruwhpeh0M/WDSsIA9J0xEITmP/VypUBwcNlz8HzAMlNobKZgswnX6EnjkB sop+73KD9sQHxQil+dNBUO2LXl1tr9gXGDxS17xRErmji+WbQUBA3g5fQU3WnuzYgL+iHnmTE qSGMUWCyjgcT91C4kZ7QDyh9wl2TkeSy49d9ENydLzE0tjmQpVjDq4eyi3FVV81Rm+OwEDx1i L8tSQxJrvZWTINMYi0D20a6Sx2imvA/tdPivU57DFShXA2tD9ix7Hl15mXi606GtHtuLxRFuj iqmqRFHkwMsF5OYUuHgrbpZ8Am2cQVqQyfTzurjn0fGCDRPDkkYHZ6b+GEFjv5eRaECtZ92kn 6o8ylu0z9tiT/97FPvVxINRMKOGIGCCR66kQXPo7h1NOU/7rCs+mPSb/TJ7ODNDTB5Mi5BN73 a1mPG3T3Zdb/SmMpjmEhZ920W8s+xuLXDX/9APdDnbuz4D3PvddxOqC1UVoIdAneNZxUSmDOv fdLZQ69abtH/1Ct214vnpGw1VnNAOqXVlEC6gu3fm0ICUdUugugGct4U7MMBfBZsOWMXvmk5c hPnNBG5vNoXyMgxT X-Spam-Status: No, score=-84.3 required=5.0 tests=BAYES_00, GOOD_FROM_CORINNA_CYGWIN, KAM_DMARC_NONE, KAM_DMARC_STATUS, RCVD_IN_DNSWL_NONE, RCVD_IN_MSPIKE_H4, RCVD_IN_MSPIKE_WL, SPF_FAIL, SPF_HELO_NONE, TXREP autolearn=ham autolearn_force=no version=3.4.4 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on server2.sourceware.org X-BeenThere: cygwin@cygwin.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: General Cygwin discussions and problem reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 07 Jan 2022 13:22:32 -0000 On Jan 6 16:11, cygwin@kosowsky.org wrote: > Corinna Vinschen wrote: > > On Jan 3 10:51, cyg...@kosowsky.org wrote: > > > I have a file: /c/Config.Msi/3da9e136.rbf that I cannot copy, even when > > > [...] > > > # getfacl 3da9e136.rbf > > > # file: 3da9e136.rbf > > > # owner: Administrators > > > # group: SYSTEM > > > user::rwx > > > group::rwx > > > other::r-x > > > user::rwx > > > group::rwx > > > group:SYSTEM:rwx > > > mask::rwx > > > other::r-x > > > [...] > > [...] > > Would you mind to run `icacls 3da9e136.rbf /save 3da9e136.acl > > and paste the content of 3da9e136.acl into your reply? > > I ran the code you suggested: > #icacls 3da9e136.rbf /save 3da9e136.acl > processed file: 3da9e136.rbf > Successfully processed 1 files; Failed processing 0 files > > #cat 3da9e136.acl > 3da9e136.rbf > D:P(A;OICI;FA;;;SY)(A;OICI;0x1200a9;;;WD)(A;OICI;FA;;;BA) > > Not sure how to interpret the above but hope it's helpful... It is. I realized belatedly, that 3da9e136.acl is apparently a directory, not a file. So I tweaked my local test accordingly, and here's my session output: $ mkdir acltest $ chown Administrators.SYSTEM acltest $ cat aclfile.sav acltest D:P(A;OICI;FA;;;SY)(A;OICI;0x1200a9;;;WD)(A;OICI;FA;;;BA) $ icacls . /restore aclfile.sav processed file: .\acltest Successfully processed 1 files; Failed processing 0 files $ icacls acltest acltest NT AUTHORITY\SYSTEM:(OI)(CI)(F) Everyone:(OI)(CI)(RX) BUILTIN\Administrators:(OI)(CI)(F) Successfully processed 1 files; Failed processing 0 files > #icacls 3da9e136.rbf > 3da9e136.rbf NT AUTHORITY\SYSTEM:(OI)(CI)(F) > Everyone:(OI)(CI)(RX) > BUILTIN\Administrators:(OI)(CI)(F) > > Successfully processed 1 files; Failed processing 0 files So the DACL is now identical to yours. Let's try getfacl: $ getfacl --version | head -1 getfacl (cygwin) 3.3.3 $ getfacl acltest # file: acltest # owner: Administrators # group: SYSTEM user::rwx group::rwx other::r-x default:user::rwx default:group::rwx default:group:SYSTEM:rwx default:mask::rwx default:other::r-x Ok, that looks correct. Now compare with the output of your getfacl: > #getfacl 3da9e136.rbf > # file: 3da9e136.rbf > # owner: Administrators > # group: SYSTEM > user::rwx > group::rwx > other::r-x > user::rwx > group::rwx > group:SYSTEM:rwx > mask::rwx > other::r-x It's exactly the same as the one my gefacl prints above, except the "default:" specifier for default ACEs is missing in the output. I can't explain that, sorry. Old getfacl version? Running an output filter of some sort? Clutching at straws here.... > > Please use "reply-to" to keep mail threading intact. Your two > > mails in terms of this problem are disconnected for some reason. > > Not sure why my MTA has not been threading properly but for some > reason I didn't receive your response either. By default I'm using "list-reply-to" in mutt, so replies are only going to the mailing list. I added you to the CC for this reply. > Hopefully this gets attached to the correct thread. It did, thanks. Corinna