This is the mail archive of the
mailing list for the Cygwin project.
Re: [ANNOUNCEMENT] TEST RELEASE: Cygwin 2.0.0-3
- From: "Houder" <houder at xs4all dot nl>
- To: cygwin at cygwin dot com
- Date: Tue, 14 Apr 2015 16:18:27 +0200
- Subject: Re: [ANNOUNCEMENT] TEST RELEASE: Cygwin 2.0.0-3
- Authentication-results: sourceware.org; auth=none
- References: <2bbd046b7e2ea40818416d8a6d3f15b8 dot squirrel at webmail dot xs4all dot nl> <20150414085757 dot GC7343 at calimero dot vinschen dot de>
> On Apr 13 18:10, Houder wrote:
>> = Cygwin 2.0 -- logged on as user Test
>> %% uname -a
>> CYGWIN_NT-6.1-WOW Seven 2.0.0(0.287/5/3) 2015-04-12 21:09 i686 Cygwin
>> %% pwd
>> %% id
>> uid=197614(Test) gid=197121(None) groups=197121(None), ... followed by irrelevant j.
>> 545(Users), 4(INTERACTIVE)66049(CONSOLE LOGON),11(Authenticated Users),15(This Organization),113(Local
>> 66048(LOCAL),262154(NTLM Authentication),401408(Medim Mandatory Level)
>> %% touch file
>> %% chmod 460 file
>> %% echo aha > file
>> bash: file: Permission denied
>> %% getfacl file
>> # file: file
>> # owner: Test
>> # group: None
> Huh? So it creates a mask even though it only contains standard POSIX
> permissions. This explains the "permission denied". The group r-x
> combined with a mask rw- results in effective r-- permissions for the
> group None. This yet again calls for adding the output of effective
> permissions to getacl.
Now I am confused ...
Permission denied above (logon as user Test) did NOT surprise me ... It was
the 'write denial' after that (logon as user Henri).
>> %% id
>> uid=197608(Henri) gid=197121(None) groups=197121(None), ...
>> %% ls -l file
>> -r--rw---- 1 Test None 0 Apr 13 17:12 file
>> %% echo ho,ho > file
>> bash: file: Permission denied # Huh? No, no, no ...
User Henri should be able to write the file, should he not? At least, that is
what the output of 'ls' says, and according to what I demanded:
chmod 460 file
(file is owned by user Test; 'None' is the primary group of user Henri)
Btw, I installed update 4 to Cygwin 2.0 ... and observe no change in the output
of getfacl, icacls ... also user Henri is still denied write access ...
> I think I fixed the thinko in the code. At one point I noticed that I
> mishandled the GROUP_OBJ permssions in new-style ACEs and my fix was
> apparently a bit too efficient :}
> I uploaded new snapshots to https://cygwin.com/snapshots/ and I'm just
> uploading a 2.0.0-0.4 release.
> Please give either of them a try.
Problem reports: http://cygwin.com/problems.html
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple