This is the mail archive of the
cygwin
mailing list for the Cygwin project.
Re: Issues with ACL settings after updating to the latest cygwin.dll - correction
- From: akikij at free dot fr
- To: cygwin at cygwin dot com
- Date: Mon, 7 Mar 2016 20:12:03 +0100 (CET)
- Subject: Re: Issues with ACL settings after updating to the latest cygwin.dll - correction
- Authentication-results: sourceware.org; auth=none
Hi, Corinna
Here an example of one problematic ACL
Here on /etc directory (here on remote system)
$ cacls .
...\ws\njcyg\etc NULL SID:(DENY)(accÃs spÃcialÂ:)
READ_CONTROL
<Domaine du compte introuvable>F
<Domaine du compte introuvable>R
Tout le monde:R
NULL SID:(OI)(CI)(IO)(DENY)(accÃs spÃcialÂ:)
READ_CONTROL
CREATEUR PROPRIETAIRE:(OI)(CI)(IO)F
GROUPE CREATEUR:(OI)(CI)(IO)R
Tout le monde:(OI)(CI)(IO)R
$ getfacl .
# file: .
# owner: Unknown+User
# group: Unknown+Group
user::rwx
group::r-x
other:r-x
default:user::rwx
default:group::r-x
default:other:r-x
$ icacls .
. NULL SID:(DENY)(Rc,S)
S-1-5-21-1315901005-2739448750-426064240-1000:(F)
S-1-5-21-1315901005-2739448750-426064240-513:(RX)
Tout le monde:(RX)
NULL SID:(OI)(CI)(IO)(DENY)(Rc,S)
CREATEUR PROPRIETAIRE:(OI)(CI)(IO)(F)
GROUPE CREATEUR:(OI)(CI)(IO)(RX)
Tout le monde:(OI)(CI)(IO)(RX)
When I get Security Tab for this directory,
Windows returns a popup message "Authorizations on etc unordered, some entries may be skipped"
After answering OK, a new panel is shown and as I click on Advanced Autorisations
Windows returns a message proposing to order the ACLs.
After ordering, I get :
$ icacls .
. NULL SID:(OI)(CI)(DENY)(Rc,S)
CREATEUR PROPRIETAIRE:(OI)(CI)(IO)(F)
GROUPE CREATEUR:(OI)(CI)(IO)(RX)
S-1-5-21-1315901005-2739448750-426064240-1000:(F)
S-1-5-21-1315901005-2739448750-426064240-513:(RX)
Tout le monde:(OI)(CI)(RX)
getfacl . is unchanged
I don't know which ACLs are or not skipped.
But at a moment of my application, I get a permission denied not for /etc (here an example),
but for another object with analog properties.
Today, I am obliged to return to 2.3 version to keep my application operational.
Regards
--
Problem reports: http://cygwin.com/problems.html
FAQ: http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple