From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mout.kundenserver.de (mout.kundenserver.de [217.72.192.74]) by sourceware.org (Postfix) with ESMTPS id 0CCBC389202A for ; Mon, 10 Jan 2022 10:07:59 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org 0CCBC389202A Authentication-Results: sourceware.org; dmarc=fail (p=none dis=none) header.from=cygwin.com Authentication-Results: sourceware.org; spf=fail smtp.mailfrom=cygwin.com Received: from calimero.vinschen.de ([24.134.7.25]) by mrelayeu.kundenserver.de (mreue109 [212.227.15.183]) with ESMTPSA (Nemesis) id 1MoNyA-1ma3zp082S-00okrp; Mon, 10 Jan 2022 11:07:57 +0100 Received: by calimero.vinschen.de (Postfix, from userid 500) id 857FCA80D60; Mon, 10 Jan 2022 11:07:47 +0100 (CET) Date: Mon, 10 Jan 2022 11:07:47 +0100 From: Corinna Vinschen To: cygwin@cygwin.com Subject: Re: Duplicate ACLs? - Can't copy file even with Admin permissions Message-ID: Reply-To: cygwin@cygwin.com Mail-Followup-To: cygwin@cygwin.com, cygwin@kosowsky.org References: <25043.7019.643488.389876@consult.pretender> <8735m12k3u.fsf@Rainer.invalid> <25047.23325.33020.646017@consult.pretender> <25048.43238.484068.737126@consult.pretender> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline In-Reply-To: <25048.43238.484068.737126@consult.pretender> X-Provags-ID: V03:K1:YWC/Ai/+OTu1GJIUrHNfYvzzJf9l2G+F0D7M1KL80Ssl20o4LEz bIuBlAEwK8h/OzOLkkbaO/aQuHXbPTQVPn9UgsKMJix0XK8pgbpZnma+jKnqxCGm1+EDlaf YD8NaoXULDXvUTE/qHejlm7AXIB2SkGIR9sE9WMI9kJ+6UNASukvEY2F1XJaxqJRAfE83Wj x4RPDh/umpo6k9WQxU2rw== X-UI-Out-Filterresults: notjunk:1;V03:K0:X0jbLxdgfQU=:GDf5qENHF0kWpp1tiA8UuW PL9qurFSigeePQzintf9izZ7VsqB5Kt3i1nVRHOhgEept5cGfxKZEbwieKNw7ROqgA0vURb04 bC6GHZ2rb0UVORQJQFjY3asLBnlaS6XUwFPz0SGPdx1WyGGTfCUbG538HpvVY+S7VFWSqTlnn wXipwiY12tw5wvA168MVJIVOrFJQbbGYU54D2jAJGWP0yRNjmi5TTM9d1Qi7OFKQWcunbb3bL 7z9C5QXj8kGknNHvllaOfUmaKMVdryLMTTOdHIo3CkAhxuQFIXJ6TYlfPODJMXackRN52kH3Y gJsPz2fuX0B3CamANa1iuO1rvQKzjOq9zqJi0+Bd2kEWTh0WnY2IbTxiL+bkAMRJ9e5RXY5WI xtr1PbIMmkmbkCDAmdx6sfus6y3LOmX5ucAzdQS4+JKpIuNyylMzZlNg5FBNUKKbG76nRF1du AAgc+wOs5Q0napRpKVommRSezSIoMV4XiZw9Do5mXZbhNB6w9S2xmXI8C0wYmATX/WuJnfgC8 dKRtwtn9x4TDMfE3EhqnI9X8FVY/mjtmTNOI1cu+WHCuUz+b4qOW6dvMbbBIFk/yng4UEnH+Q c3mEMmDcKjxiXGDk8OTMeq0aBVMTbeQWACFq3n1Qgj+38qg4wXxYpGs9HNKFpswowLv87BP5T ukmSw521AbhnC/PCHhBll/vroAybpm0NTmNu+1STPH1dqFTkJcrFQkdnVhBGgfOkpZg0hu/UU o7pgA8IJetId4T9nE+gOOI6C5ISf+cIusJNg8Tk4uujqiLWqRs865DELy8VmXVXg5I2uv0ITk XzuD9H8oe19QWDAUFZAQCPdSN8DdOS8wJkr3gLhzXRLFxnvBjvyEI7PnVZEkqR8BzpiPGCApE 6F5xgsBakK8k83D+qq1IQFuDUUL0KwtT5kVl97qageENVaqT1gRXVXxJBJGUE5dsnbJM0bOQ6 5uRfmg5PkJPXZ2Auh5sdBIASUo8eJ6/W4AN7lwCwwkDGrZe41vtDfMOjwcgUhVaMiCneqeNm2 lmAVaQSX/DA5weV8omip8Jo= X-Spam-Status: No, score=-90.1 required=5.0 tests=BAYES_00, GOOD_FROM_CORINNA_CYGWIN, KAM_DMARC_NONE, KAM_DMARC_STATUS, RCVD_IN_DNSWL_NONE, SPF_FAIL, SPF_HELO_NONE, TXREP autolearn=ham autolearn_force=no version=3.4.4 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on server2.sourceware.org X-BeenThere: cygwin@cygwin.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: General Cygwin discussions and problem reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 10 Jan 2022 10:08:01 -0000 On Jan 7 15:56, cygwin@kosowsky.org wrote: > > Corinna Vinschen wrote: > > On Jan 6 16:11, cyg...@kosowsky.org wrote: > > It is. I realized belatedly, that 3da9e136.acl is apparently a > > directory, not a file. > > It's actually a file... This is weird. The meaning of the OI and CI markers are "Object inheritance" and "Container inheritance". These bits only make sense for directories and they control how ACEs are inherited by child objects (files) and child containers (subdirs). Consequentially, if I use `icacls /restore' on a file with the DACL saved by you, the OI and CI bits are simply ignored. After /restore, if I call /save again the resulting file looks like this: $ cat aclfile-after-restore.sav acltest D:PAI(A;;FA;;;SY)(A;;0x1200a9;;;WD)(A;;FA;;;BA) However, this gave me a clue. If this is really a file, it's a good chance that the inheritance flags are restricted to directories at one point in either the Cygwin DLL itself, or the getfacl tool. I'll have a look into the sources later, but I sure would prefer if I could create such a file locally. Thanks, Corinna