From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 40116 invoked by alias); 9 Feb 2016 20:53:27 -0000 Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Received: (qmail 40075 invoked by uid 89); 9 Feb 2016 20:53:26 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-2.3 required=5.0 tests=AWL,BAYES_00,FREEMAIL_FROM,RCVD_IN_DNSWL_LOW,SPF_PASS autolearn=ham version=3.3.2 spammy=0644, umask, non-canonical, noncanonical X-HELO: mail-wm0-f54.google.com Received: from mail-wm0-f54.google.com (HELO mail-wm0-f54.google.com) (74.125.82.54) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with (AES128-GCM-SHA256 encrypted) ESMTPS; Tue, 09 Feb 2016 20:53:25 +0000 Received: by mail-wm0-f54.google.com with SMTP id p63so1090981wmp.1 for ; Tue, 09 Feb 2016 12:53:24 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:subject:date:message-id:in-reply-to :reply-to:user-agent:mime-version:content-type :content-transfer-encoding; bh=DBnXU7fpiW8uyDT73/2gjEH2gnlm8PQekmvoBs9i2SM=; b=JhJWTHWmePA/83ikVzuIxdBxFOCgqcKjAKkJy8fSLPu96Mx6Y9shytBVsV0YbEm/Qp m66KaZ9afk9OaxjrS2OUbfthNJPI91/FJAJeqGf1lBA3UOfeMzMghkhj/DRO31aNPZdX LC7bs5sCUWhm2hs5fUKg1TgcBJBeSn/uTASJ/o7sfnbrA/wief9+nWiT5Z5iW0TyxtCv ZK4kEqbT3LeQTNVjiXuQCxNv4t8DSHtUVPmdccenFrWerBlbo5bSrhdu+bpYt5Rh/lTH lpWB3SQEHa9/XaQlYJ+KYWgSZhiKTUnXlFfx0lbWWX3SQ7y2fKslPpQuehkkFlpZ8O87 PB1g== X-Gm-Message-State: AG10YOT6CkqQaPtqnn3xXIO7ds6m/w7XD9j6MduU0Z910J1X4ganGH6HKCH+WxSQaRkl4A== X-Received: by 10.28.102.68 with SMTP id a65mr7427069wmc.12.1455051201902; Tue, 09 Feb 2016 12:53:21 -0800 (PST) Received: from [192.168.1.116] (cm146-196.liwest.at. [81.10.146.196]) by smtp.gmail.com with ESMTPSA id gb9sm36321479wjb.26.2016.02.09.12.53.21 for (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Tue, 09 Feb 2016 12:53:21 -0800 (PST) From: xnor To: cygwin@cygwin.com Subject: Re[2]: Issues with ACL settings after updating to the latest cygwin.dll Date: Tue, 09 Feb 2016 20:53:00 -0000 Message-Id: In-Reply-To: <20160208181956.GI12975@calimero.vinschen.de> Reply-To: xnor User-Agent: eM_Client/6.0.24316.0 Mime-Version: 1.0 Content-Type: text/plain; format=flowed; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-IsSubscribed: yes X-SW-Source: 2016-02/txt/msg00120.txt.bz2 >Not sure what Transmission is, but files downloaded with POSIX >tools are usually not executable. For instance, download Cygwin's >setup-x86.exe with wget. Then try to execute it. It won't since >the permissions are set according to your umask and without execute >permissions, e.g., 0644. This is normal. The behavior has changed with the ACL change in Cygwin and I would not=20 consider that "normal". The warning from Windows is not normal. I realize that the previous implementation was already problematic and=20 messed with permissions but I did not notice it since it never denied=20 executing executables. >The permissions must *not* be reordered. If Cygwin creates permissions >incorrectly it's one thing, but the order to emulate POSIX permissions >is non-canonical. Reordering them will break them. > >Please provide the exact output from icacls. They *have* to be reordered to be modifiable in Windows/Explorer. In=20 other words, if I want to change permission the new ACL behavior ensures=20 that it breaks the Cygwin permissions? Here is the output from icacls /saveacl for some file: D:P(D;;RPWPDTRC;;;S-1-0-0)(A;;0x1f019f;;;S-1-5-21-559282050-488988736-20196= 39472-1001)(D;;WP;;;AU)(D;;WP;;;SY)(D;;WP;;;BA)(D;;WP;;;BU)(A;;FR;;;S-1-5-2= 1-559282050-488988736-2019639472-513)(A;;0x1201bf;;;AU)(A;;0x1201bf;;;SY)(A= ;;0x1201bf;;;BA)(A;;0x1200a9;;;BU)(A;;FR;;;WD) After letting Windows fix the order: D:PAI(D;;RPWPDTRC;;;S-1-0-0)(D;;WP;;;AU)(D;;WP;;;SY)(D;;WP;;;BA)(D;;WP;;;BU= )(A;;0x1f019f;;;S-1-5-21-559282050-488988736-2019639472-1001)(A;;FR;;;S-1-5= -21-559282050-488988736-2019639472-513)(A;;0x1201bf;;;AU)(A;;0x1201bf;;;SY)= (A;;0x1201bf;;;BA)(A;;0x1200a9;;;BU)(A;;FR;;;WD) Here is what's "normal" for Windows if I create a file under a new=20 folder on C: in Explorer: D:AI(A;ID;FA;;;BA)(A;ID;FA;;;SY)(A;ID;0x1200a9;;;BU)(A;ID;0x1301bf;;;AU) Strangely enough this is displayed as "-rwxrwx---+ MyUser None" with `ls=20 -l` even though my user is in the group Administrators. Here is what I would expect: MyUser is in the group Administrators. Given the inherited permissions=20 above a Windows-created file should be shown as "-rwxrwxr--+ MyUser=20 Administrators"? After chmod 664 I would expect this: - still inherit all the permissions - add permission MyUser DENY execute - add permission Administrators DENY execute - add permission Everyone ALLOW read Instead Cygwin copies all permissions, drops the inheritance, copies=20 them again, adds None, adds NULL SID ... After a consecutive chmod 770 I would expect the above non-inherited=20 permissions to be removed again. -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple