Perl bug (was Re: [1.7] cygwin allows writing to readonly files)

Corinna Vinschen corinna-cygwin@cygwin.com
Tue Aug 11 11:48:00 GMT 2009


On Aug 11 12:44, Reini Urban wrote:
> 2009/8/11 Corinna Vinschen:
> > That might be a good workaround nevertheless.  You should just test the
> > list of supplementary groups as well, along these lines:
> 
> We already have an ingroup() check in this Perl_cando() function, so
> there is no
> need to write it again. But it is disabled in perl core for this code path.
> See http://perl5.git.perl.org/perl.git/blob/HEAD:/doio.c#l1929
> It would be:
>     if (ingroup(544,effective))
> 	return TRUE;		/* Administrators read and write anything */
> but this is simply not true, as under unix. Windows Administrators
> fall under the same ACL restrictions as normal users. So only using
> access() is reliable.

I don't understand what you're tryin to say.  The members of the Admin
group have always write access to files due to the SE_BACKUP_NAME
privilege enabled in Cygwin.


Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Project Co-Leader          cygwin AT cygwin DOT com
Red Hat

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple



More information about the Cygwin mailing list