[ANNOUNCEMENT] TEST RELEASE: Cygwin 1.7.33-0.1

Corinna Vinschen corinna-cygwin@cygwin.com
Wed Oct 22 13:54:00 GMT 2014


On Oct 22 13:35, Habermann, Dave (DA) wrote:
> Read through https://cygwin.com/preliminary-ntsec.html and in general
> found it to be quite useful.  I'm hoping to do some testing perhaps
> later this week or early next.  I have a couple of questions:
> 
> 1) Any thoughts about the rough timing of this "going live"?

I'm heading for "at some arbitrary day in November".

> 2) The documentation says (as I read it): Well-known/builtin accounts
> named as in Windows, then (for domain member) "Local machine accounts
> of a domain member machine get a Cygwin user name the same way as
> accounts from another domain: The local machine name gets prepended".
> As I read this, cyg_serv account (under which I currently run SSHD)
> would now have a new name MYMACHINE+cyg_serv.  Am I reading this
> correctly?  Is there some reconfiguration I'll need to do to get SSHD
> to run properly?

In theory, no.  The last OpenSSH update, 6.7p1-1, alreadyd contained
the upstream fix to work with local sshd accounts which have the
machine name prepended.

> 3) I also read "Cygwin implements the Solaris API to access Windows
> ACLs in a Unixy way" (although your email says "Revamp Solaris ACL
> implementation to more closely work like POSIX ACLs are supposed to
> work").  So is it Solaris or is it POSIX, and if Solaris then I wonder
> why since it seems that everywhere else you've tried to be as POSIX as
> possible.

Solaris ACLs *are* POSIX ACLs :)

The difference is not how these ACLs look like, but only in the API
used to access the ACLs.

The Solaris API was finished and working at the time I implemented this
POSIX ACL support in Cygwin, while the POSIX draft 1003.1e was still in
the works, and our role model Linux didn't even now how to spell ACL.
These days, Linux implements the POSIX 1003.1e draft, (which, funny
enough, has been withdrawn long ago), while Solaris and Cygwin provide
the original Solaris API.

What has chnaged with 1.7.33 is that the handling of POSIX ACLs is
now much more aligned with how they are implemented on Solaris or 
Linux.  Especially the CLASS_OBJ stuff didn't exist before, but now
it gets emulated.

> Thanks for all your hard work on this, I will certainly be one of the
> benefactors (12 Mb group file, takes hours to refresh so not done
> since this time last year).

Cool, thank you!

I'm really looking forward to this release.  The account handling
changes is something I had on the TODO list for ages, and the new
SEH-based internal exception handling is a great benefit for the 64 bit
version.


Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <http://cygwin.com/pipermail/cygwin/attachments/20141022/d5792ade/attachment.sig>


More information about the Cygwin mailing list