DMARC-Filter:	OpenDMARC Filter v1.4.2 delorie.com 55J8uE1Y1548878
Authentication-Results:	delorie.com; dmarc=pass (p=none dis=none) header.from=cygwin.com
Authentication-Results:	delorie.com; spf=pass smtp.mailfrom=cygwin.com
DKIM-Filter:	OpenDKIM Filter v2.11.0 delorie.com 55J8uE1Y1548878
Authentication-Results:	delorie.com;
	dkim=pass (1024-bit key, unprotected) header.d=cygwin.com header.i=@cygwin.com header.a=rsa-sha256 header.s=default header.b=SJO5vrmE
X-Recipient:	archive-cygwin AT delorie DOT com
DKIM-Filter:	OpenDKIM Filter v2.11.0 sourceware.org 0DBCF386B8BB
DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com;
	s=default; t=1750323373;
	bh=/Xxt5h9eGLTveDBpaliP5wkQ6xTVOk8BNJp15ZKkkBM=;
	h=References:In-Reply-To:Date:Subject:To:List-Id:List-Unsubscribe:
	List-Archive:List-Post:List-Help:List-Subscribe:From:Reply-To:
	From;
	b=SJO5vrmE2EIJ4DbY7G+oTb/I5pRx2LbhHcL7lkJdgCOFA3iySmOtozjWMfc+d2wXJ
	fVC/izuwssVTOOktoJSmtwI1U2A3Py2JvohUixMIpRRoGLKIxESLWzGjY0hWQ3UH3F
	Rbcnel4zk/3By3cyBGDwkIrcaremj3H9WrRV8EQw=
X-Original-To:	cygwin AT cygwin DOT com
Delivered-To:	cygwin AT cygwin DOT com
DMARC-Filter:	OpenDMARC Filter v1.4.2 sourceware.org 6F3793850B39
ARC-Filter:	OpenARC Filter v1.0.0 sourceware.org 6F3793850B39
ARC-Seal:	i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1750323295; cv=none;
	b=aoK1eidiUqZnm9KUWDi1pIQqcmwiD/KNjvH2VGYU+5KrDM14oFRA1LNc/nkEd5GbOUVbiEpJgI+TGX4IngiXIn3AqheoQxEjpZZfCd5POXvRfWFwRFKQZ6LdE70hAaXYfD7NwSyt5Ei5Qn3gpPTPvAe5+uNFaiN0XgnndZBQQx0=
ARC-Message-Signature:	i=1; a=rsa-sha256; d=sourceware.org; s=key;
	t=1750323295; c=relaxed/simple;
	bh=p5x+19GvhvG9Uk43rALA66tz2/m22e0braJl0uvsX9c=;
	h=DKIM-Signature:MIME-Version:From:Date:Message-ID:Subject:To;
	b=YXwMS+WBU5IDi1vCQV4CI1gPU9uqVcwGvqXTHY7i0x3RlSvt0aZVKyv4WWZJwo0muBfFTbmF7R21EZNahAuE2iCMNlp5UmcB5viVlScNqco56KY5BrX6M5vJxDy9hTtuO3lxOY2e6DOj08mFMvY5vAfzcuh/0xIQ1oHYvbfbXec=
ARC-Authentication-Results:	i=1; server2.sourceware.org
DKIM-Filter:	OpenDKIM Filter v2.11.0 sourceware.org 6F3793850B39
X-Google-DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed;
	d=1e100.net; s=20230601; t=1750323294; x=1750928094;
	h=to:subject:message-id:date:from:in-reply-to:references:mime-version
	:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
	bh=ZUjEU71cjp7gin0Yy4fW+JLewhabIyU2APiTvA08S70=;
	b=F4iAB8G/Btjs3sojPgddXI4lLeRyI8mtiKwl5VCheHQi4A5KmLCMgngWOUcCpWHIYE
	HB1GZkS2gJZ0UB2+h4hzrobMR78E2vIbFLizBMMx4VLzxsg4/h1dypMtDxIO4+xcFIfF
	p9vZdNlUWb1rU6fcHU0j9A4drjyrUWdFMsURhWQ/9m/IyAv+FN+bX7EePQUngERH8qDS
	RPMcCsCltDbBHWyN6UAfpzX/VFx+jnOe2gsu4DQ/6IhUcEtwPlVmq4BmJVkRhffTZRfw
	xJ0tVBKpncM5TFvdpQycRQ2NGgi2kfB1a23afyVYVFLqqE0zmoJevQvHL7DwxZ5f8PUu
	sGVA==
X-Forwarded-Encrypted:	i=1;
	AJvYcCUgmrfOld86ZfCpjLvLO+S1ieNkObX7/AWhvDS/4fe0O7MSuDpjCF/Sn0bCpOSvJgRKLU2Yf3Q3vGFUDp51mw==@cygwin.com
X-Gm-Message-State:	AOJu0YxxsMnfHKgdeMJX01heFd+zfljrOBq6RUgzPmzul3mzXpoVmveH
	kmke6CbV0RMMC+4eA0e8410yDwcR4Q3+eoS9B2irBlLm5qGR2E3wPK9zdRpJBqdyr8xQkcbJDe9
	cGccc9wj91qoWSRmESkyRPZGLASd1iiZg6Q==
X-Gm-Gg:	ASbGncuw6p8ZjYIStV58g/EvTdQC6JHmsFDoyF82CaEDrYw8PUtffB/wiHHSKPHHu4s
	Qsq1k9A4FHsbwQ7/ro5dy8zXCJvwX2w7lnG3c2TtECp4XPenAIi/uOK0BHekF9DMoisZqBERKCR
	xyHEExDwwyvErtZORZ8c90Iu3CImX4+EMsoHnFKLDbTQ==
X-Google-Smtp-Source:	AGHT+IEKzcHcMerNV0dDE3fmfBv1y++Q7cEUrWJlQbbxCLtrV2YHTDJ1fowpPxee3+T3+SL81Q3CHRlc8YWnQfZJv3A=
X-Received:	by 2002:a17:907:7e94:b0:ace:d710:a8d1 with SMTP id
	a640c23a62f3a-adfad3cf8cbmr1744327066b.24.1750323293303; Thu, 19 Jun 2025
	01:54:53 -0700 (PDT)
MIME-Version:	1.0
References:	<CAPJSo4Ur9+i_LtHcxrMNKuFzXDmV-XtxY+-7Xh=0SY0o1C3+wA AT mail DOT gmail DOT com>
	<87219f19-5498-4cf8-9279-1f2993845034 AT SystematicSW DOT ab DOT ca>
	<CAPJSo4UjOVbQ9_CHXxeThNWbuXci6mx7c4r=0HvAf-0BCR2=tw AT mail DOT gmail DOT com>
	<2d25692d-d659-47da-8e4f-cd60d4b0c727 AT SystematicSW DOT ab DOT ca>
In-Reply-To:	<2d25692d-d659-47da-8e4f-cd60d4b0c727@SystematicSW.ab.ca>
Date:	Thu, 19 Jun 2025 10:54:16 +0200
X-Gm-Features:	Ac12FXyWJrccJni6yac5LO_fNGECFfO7dqH6Ksvnd36Ai_L1WCGQILGi6uJ2dS4
Message-ID:	<CAPJSo4VmRM9yR4CJ8+X=2YVfq1K8tofB=fU8kNeGVq6mSVaZDA@mail.gmail.com>
Subject:	Re: /usr/bin/setfacl is broken in 3.7.0-0.127.g2029784e05d9
To:	cygwin AT cygwin DOT com, Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
X-BeenThere:	cygwin AT cygwin DOT com
X-Mailman-Version:	2.1.30
List-Id:	General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Archive:	<https://cygwin.com/pipermail/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe:	<https://cygwin.com/mailman/listinfo/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
From:	Lionel Cons via Cygwin <cygwin AT cygwin DOT com>
Reply-To:	Lionel Cons <lionelcons1972 AT gmail DOT com>
Sender:	"Cygwin" <cygwin-bounces~archive-cygwin=delorie DOT com AT cygwin DOT com>

On Mon, 16 Jun 2025 at 22:57, Brian Inglis via Cygwin <cygwin AT cygwin DOT com> wrote:
>
> On 2025-06-16 03:17, Lionel Cons via Cygwin wrote:
> > On Fri, 13 Jun 2025 at 21:52, Brian Inglis via Cygwin <cygwin AT cygwin DOT com> wrote:
> >>
> >> On 2025-06-13 06:09, Lionel Cons via Cygwin wrote:
> >>> /usr/bin/setfacl is broken in 3.7.0-0.127.g2029784e05d9
> >>>
> >>> my testcase:
> >>> lionel$ uname -a
> >>> CYGWIN_NT-10.0-19045 halcyonrenard17 3.7.0-0.127.g2029784e05d9.x86_64
> >>> 2025-06-10 12:15 UTC x86_64 Cygwin
> >>> lionel$ mkdir nfstmp1
> >>> ionel$ setfacl -m g::rwx nfstmp1
> >>> setfacl: Permission denied
> >>> ionel$ setfacl -m g:None:rwx nfstmp1
> >>> setfacl: Permission denied
> >>>
> >>> This was working in Cygwin 3.5
> >>
> >> No changes have been made to the utility for five years,
> >
> > Are you sure? Isn't this tool part of coreutils?
>
> $ cygcheck -f /usr/bin/{g,s}etfacl
> cygwin-3.6.1-1
> cygwin-3.6.1-1
>
> Apparently mainly based on:
>
>         https://man.freebsd.org/cgi/man.cgi?query=setfacl&sektion=1
>
>         http://www.trustedbsd.org/acls.html
>
> also Linux uses:
>
>         https://man7.org/linux/man-pages/man1/setfacl.1.html
>
>         http://savannah.nongnu.org/projects/acl
>
>         http://savannah.nongnu.org/bugs/?group=acl
>
>         "ACL File Utilities"
>
> as we have had discussions about man pages missing from the man-pages-linux
> packages and sources for alternates we could provide, and whether that would be
> desirable and adequate.
>
> >> but a lot of changes
> >> have been made to the DLL since 3.5.
> >>
> >> Could you please install current stable cygwin 3.6.3, retest and report,
> >
> > lionel$ uname -a
> > CYGWIN_NT-10.0-19045 halcyonrenard17 3.6.3-1.x86_64 2025-06-05 11:45
> > UTC x86_64 Cygwin
> > lionel$ setfacl --version
> > setfacl (cygwin) 3.6.3
> > POSIX ACL modification utility
> > Copyright (C) 2000 - 2025 Cygwin Authors
> > This is free software; see the source for copying conditions.  There is NO
> > warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
> >
> > ## testing with a file:
> > lionel$ rm -f myfile && touch myfile && setfacl -m g::rwx myfile
> > # works
> >
> > ## testing with a dir:
> > lionel$ rm -Rf mydir && mkdir mydir && setfacl -m g::rwx mydir
> > setfacl: Permission denied
> >
> > So in Cygwin 3.6.3 setfacl for files works, but not for dirs
>
> Thanks for doing that.
>
> One thing we have to watch for is to ensure that DACLs (Default ACLs) are set on
> directories so files and subdirectories are accessible, for example:
>
>         dacl=d:u::rwx,d:g::r-x,d:o::r-x
>         ...
>         setfacl -m$dacl $dir
>
> although you would normally also set regular ACLs at the same time to be sure.
>
> So your directory ACLs depend on its parent's DACLs, but there is still an issue
> there.
>
> I too get:
>
>         $ setfacl -m g::rwx test
>         setfacl: Permission denied
>
> but:
>
>         $ chmod -c g+rwx test           # works
>         mode of 'test' changed from 0755 (rwxr-xr-x) to 0775 (rwxrwxr-x)
>         $ setfacl -m g::rwx test        # works but changes nothing
> >> to try
> >> and narrow down the issue occurrence to changes in major version 3.6 or 3.7, or
> >> better to minor versions if you have the space and time?
> >
> > How can I install each Cygwin minor version (not just the Cygwin
> > *.dll, I mean EVERYTHING including dependencies)?
>
> Maybe just cygwin (DLL and utilities) package 3.5.7 and 3.6.0 if you have time?

Cygwin 3.3 /usr/bin/setfacl.exe works with both dirs and files. Cygwin
3.5.7 I can only test when I am back in my office next week :(

@Corinna Vinschen Could you have a look at this issue, please?

Lionel

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

- Raw text -