From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <corinna@sourceware.org>
Received: by sourceware.org (Postfix, from userid 2155)
	id C4A923858C54; Fri, 14 Apr 2023 20:17:40 +0000 (GMT)
DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org C4A923858C54
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com;
	s=default; t=1681503460;
	bh=ZRybwwGxxtd3qNFGHeScH3SxQd8pF8n6qlOvh92h91M=;
	h=Date:From:To:Subject:Reply-To:References:In-Reply-To:From;
	b=C+bi3Lxs5cialrBxG0ky8M8a0lPaRUG8UgEaCJ658imc++2kKe4AwVzpGt0hvsQWw
	 6BvW1j20KENAl066OyaCXMexqExeZKdTOnNvMYhGAl/rlWC/VYHrlTFoj4+utXGMN3
	 Og26YBqMCFh6y/z9Kx2KZDapvRgm0k+FF2ZthC7I=
Received: by calimero.vinschen.de (Postfix, from userid 500)
	id 254E1A81B29; Fri, 14 Apr 2023 22:17:39 +0200 (CEST)
Date: Fri, 14 Apr 2023 22:17:39 +0200
From: Corinna Vinschen <corinna-cygwin@cygwin.com>
To: cygwin@cygwin.com
Subject: Re: Permissions question / issue
Message-ID: <ZDm045CihJaS5KXj@calimero.vinschen.de>
Reply-To: cygwin@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
References: <88697a53-26db-6969-2c18-3d6133d248c1@cs.umass.edu>
 <ZDmlSTitA7bLQzY1@calimero.vinschen.de>
 <87c859fc-0bfb-e6cc-a29e-29ba4eaa1820@cs.umass.edu>
 <1e61ce54-407c-a719-f55a-c8c8ccbc4d6b@cs.umass.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
In-Reply-To: <1e61ce54-407c-a719-f55a-c8c8ccbc4d6b@cs.umass.edu>
List-Id: <cygwin.cygwin.com>

On Apr 14 15:49, Eliot Moss via Cygwin wrote:
> At present I have:
> 
> $ getfacl id_rsa2
> # file: id_rsa2
> # owner: moss
> # group: moss
> user::rw-
> group::---
> group:SYSTEM:r--        #effective:---
> mask::---
> other::---
> 
> $ icacls id_rsa2
> id_rsa2 NULL SID:(DENY)(Rc,DC)
>         ELIOT-SURFACE-3\moss:(R,W,D,WDAC,WO)
>         ELIOT-SURFACE-3\moss:(Rc,S,RA)
>         NT AUTHORITY\SYSTEM:(R)
>         Everyone:(Rc,S,RA)
> 
> I don't claim expert level understanding of the Windows access
> scheme, but Windows Explorer believes that SYSTEM has read access
> to the file, so I suppose this will work.  I guess we're kind of
> lying to cygwin a little - but in a way that is useful here.

Oh, cool, of course!  Given "mask" is POSIX-only, the backup tool should
work nicely.

Great solution!  I should have thought of that myself, given how long
I have hacked on this POSIX ACL stuff...


Corinna