This is the mail archive of the
cygwin-developers@cygwin.com
mailing list for the Cygwin project.
Re: NTSEC users: Please test
- To: cygdev <cygwin-developers at cygwin dot com>
- Subject: Re: NTSEC users: Please test
- From: Kazuhiro Fujieda <fujieda at jaist dot ac dot jp>
- Date: 25 Jul 2001 22:28:35 +0900
- References: <20010716004416.O25442@cygbert.vinschen.de>
- Reply-To: cygwin-developers at cygwin dot com
>>> On Mon, 16 Jul 2001 00:44:16 +0200
>>> Corinna Vinschen <vinschen@redhat.com> said:
> I think I found how to do it and I implemented it now that way:
>
> - The DELETE permission is never used.
> - The FILE_DELETE_CHILD permission is only set on directories
> if user (or group or others) has write and execute permission.
> This reflects the POSIX permission to delete a file or subdirectory
> only if w and x bits are both set.
> - If S_ISVTX bit should be set the FILE_DELETE_CHILD permission isn't
> set for "others" even if they have write and execute bit set. This
> seems to match the POSIX behaviour now as close as possible.
This way can't allow us to delete files created in the directory
with the special ACE, the full rights of the "creator owner".
The default temporary directory is C:/TEMP with the ACE on NT4.0.
The ACE is used to realize the semantics like the S_ISVTX bit on UNIX.
So we should be able to freely operate files created by ourselves
in the directory. But we can't delete them created by the new DLL.
I propose ntsec adds the DELETE permission of the owner to files
created in such directories.
____
| AIST Kazuhiro Fujieda <fujieda@jaist.ac.jp>
| HOKURIKU Center for Information Science
o_/ 1990 Japan Advanced Institute of Science and Technology