From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from smtp-out-so.shaw.ca (smtp-out-so.shaw.ca [64.59.136.138]) by sourceware.org (Postfix) with ESMTPS id 66B74385703D for ; Sat, 24 Oct 2020 04:43:29 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.3.2 sourceware.org 66B74385703D Received: from [192.168.1.104] ([24.64.172.44]) by shaw.ca with ESMTP id WBOpkAPpQktFkWBOqkq2hA; Fri, 23 Oct 2020 22:43:28 -0600 X-Authority-Analysis: v=2.4 cv=NYRYa0P4 c=1 sm=1 tr=0 ts=5f93b0f0 a=kiZT5GMN3KAWqtYcXc+/4Q==:117 a=kiZT5GMN3KAWqtYcXc+/4Q==:17 a=IkcTkHD0fZMA:10 a=94nOnFI1EgyDtX4ev68A:9 a=QEXdDO2ut3YA:10 Reply-To: Brian.Inglis@Shaw.ca Subject: Re: Fwd: Objects in ACL cygwin win 10 To: cygwin@cygwin.com References: <3f0e071c-66c7-b6e8-f907-40a333872d07@SystematicSw.ab.ca> <9c03f3ea-8989-5f93-41c4-4d832eaef94c@cs.umass.edu> From: Brian Inglis Autocrypt: addr=Brian.Inglis@Shaw.ca; prefer-encrypt=mutual; keydata= mDMEXopx9BYJKwYBBAHaRw8BAQdAPq8FIaW+Bz7xnfyJ1gHQyf2EZo5sAwSPy/bRAcLeWl+0 I0JyaWFuIEluZ2xpcyA8QnJpYW4uSW5nbGlzQFNoYXcuY2E+iJYEExYIAD4WIQTG63sbl+cr 2nyOuZiKvQKcH1E27wUCXopx9AIbAwUJCWYBgAULCQgHAgYVCgkICwIEFgIDAQIeAQIXgAAK CRCKvQKcH1E276DmAP91Bt8kfJhKHYb9b2sao2fxwJFsl1GlRi516WKI0OkphQEA+ULITsPs blfzSq+GgI7q4LPfRfTLy4Oo3gorlnhnfgm4OAReinH0EgorBgEEAZdVAQUBAQdAepgIsLwm GQicfoIBaB9xHp63MQJqVCPbgPzESTg7EEwDAQgHiH0EGBYIACYWIQTG63sbl+cr2nyOuZiK vQKcH1E27wUCXopx9AIbDAUJCWYBgAAKCRCKvQKcH1E27+zoAP4u2ivMQBAqaMeLOilqRWgy nV2ATImz1p2v1H5P4kBiDwD3caPK1cxU5lijzuSDCjgtIpgF/avHbjA32fxJdIRwAA== Organization: Inglis Message-ID: Date: Fri, 23 Oct 2020 22:43:27 -0600 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:68.0) Gecko/20100101 Thunderbird/68.12.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Language: en-CA Content-Transfer-Encoding: 7bit X-CMAE-Envelope: MS4xfID6dnYw6R1XIIWsrjbQrEthyTHo/pzbjfLC8sXq6K6aQu13lWh3fldjV3ac372+Gj34G+qhnREBPRHZEflqqYZoBEZsz6zWsFgFqonlSCQASyFja/5V xRBpUHQJfbXWbrbI156h2FHQQCceMTvXvHdeeNMlZB3pX6tjGOJEfxripAIHCeQ6lddSyGTya9DUrg== X-Spam-Status: No, score=-3.4 required=5.0 tests=BAYES_00, DKIM_SIGNED, DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, KAM_NUMSUBJECT, NICE_REPLY_A, RCVD_IN_DNSWL_LOW, SPF_HELO_NONE, SPF_PASS, TXREP autolearn=ham autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on server2.sourceware.org X-BeenThere: cygwin@cygwin.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: General Cygwin discussions and problem reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 24 Oct 2020 04:43:31 -0000 On 2020-10-23 21:49, Jim McNamara via Cygwin wrote: > On Fri, Oct 23, 2020, 10:06 PM Eliot Moss wrote: >> I have to admit I am not 100% sure what you are asking, but I am careful >> to grant SYSTEM access so >> that my backup program can access and save a copy of virtually everything > Thanks for you and Brian helping me. > I used icacls cygwin /q /c /t reset You have to be very careful using icacls and other Windows commands with Cygwin ACLs as "ICACLS preserves the canonical ordering of ACE entries: Explicit denials Explicit grants Inherited denials Inherited grants" and Cygwin's POSIX ACLs may or may not obey this canonical order; Windows File Explorer often does not consider Cygwin ACLs in what it considers canonical order and requires them to be reordered, which breaks the Cygwin permissions. Ah, that "NT AUTHORITY/SYSTEM" SID, normally paired with BUILTIN/Administrators, as users, groups, or both: $ ls -dl /proc/cygdrive/c/Users/; echo; getfacl /proc/cygdrive/c/Users/; echo; icacls C:/Users/ drwxr-xr-x+ 1 SYSTEM SYSTEM 0 Apr 13 2020 /proc/cygdrive/c/Users/ # file: /proc/cygdrive/c/Users/ # owner: SYSTEM # group: SYSTEM user::rwx group::r-x group:Administrators:rwx #effective:r-x group:Users:r-x mask::r-x other::r-x default:user::rwx default:group::--- default:group:Administrators:rwx #effective:r-x default:group:Users:r-x default:mask::r-x default:other::r-x C:/Users/ NT AUTHORITY\SYSTEM:(OI)(CI)(F) BUILTIN\Administrators:(OI)(CI)(F) BUILTIN\Users:(RX) BUILTIN\Users:(OI)(CI)(IO)(GR,GE) Everyone:(RX) Everyone:(OI)(CI)(IO)(GR,GE) Successfully processed 1 files; Failed processing 0 files -- Take care. Thanks, Brian Inglis, Calgary, Alberta, Canada This email may be disturbing to some readers as it contains too much technical detail. Reader discretion is advised. [Data in binary units and prefixes, physical quantities in SI.]