This is the mail archive of the cygwin mailing list for the Cygwin project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

Re: Too Many Permissions Stripped In 1.7.35?


On Feb 26 15:51, Bryan Berns wrote:
> > That's not really a goal.  The SYSTEM permissions are kind of useless
> > anyway, given that SYSTEM has permissions to read and write all files
> > anyway.  I don't see that a rule to add SYSTEM permissions to all files
> > accomplishes anything which isn't already available anyway.
> 
> I don't think this is true; see below when running as the system account:
> 
> V:\>echo %USERNAME%
> BERNS-WINDOWS$
> V:\>icacls V:\Test
> V:\Test DOMAIN\Administrator:(OI)(CI)(F)
> Successfully processed 1 files; Failed processing 0 files
> V:\>cd V:\Test
> Access is denied.
> V:\>

You just have to enable the SeBackupName and SeRestoreName privs.
Try in Cygwin.  It does that automatically.

For cases where you need to stick to the Windows ACLs, use noacl
mounts.


Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

Attachment: pgpvC6GObJeg9.pgp
Description: PGP signature


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]