X-Recipient: archive-cygwin AT delorie DOT com X-Spam-Check-By: sourceware.org Message-Id: <200803020039.m220dPWW010681@tigris.pounder.sol.net> From: cygzw AT trodman DOT com (Tom Rodman) Reply-to: cygwin AT cygwin DOT com To: cygwin AT cygwin DOT com Subject: Re: full control for non owner and resulting 'cp' created file perms In-reply-to: <47C9CE74.39293530@dessent.net> References: <200803012102 DOT m21L276p016693 AT tigris DOT pounder DOT sol DOT net> <47C9CE74 DOT 39293530 AT dessent DOT net> Date: Sat, 01 Mar 2008 18:39:25 -0600 X-IsSubscribed: yes Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm Precedence: bulk List-Id: List-Unsubscribe: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com On Sat 3/1/08 13:45 PST Brian Dessent wrote wrote: > Tom Rodman wrote: > > > The file "zam" below has slightly unusual windows permissions - > > it does not inherit from it's parent dir, the owner of the > > file has no ACES, another user "staffuser1" has full control. > > Is staffuser1 an administrator? yes forgot to mention (applies to both shell sessions): /tmp $ which cp cp is aliased to `command cp -i -p' cp is /usr/bin/cp cp is /bin/cp /tmp $ groups XYZ_ES_STAFF Administrators ABC_NA-DG-ADS-ServiceAccountsGlobal ABC_NA-CTX-Notepad-A Domain Users XYZ_ES_ADMIN XYZ_Users Users /tmp $ > Cygwin opens files using the 'backup' > privilege in order to emulate the POSIX semantics that root can access > any file regardless of permissions. But of course the backup privilege > requires the user to be an administrator so there's no real privilege > leak, since an administrator can always take ownership of the object and > set an arbitrary dacl. OK, I see, thanks > This started with 1.5.22: > thx for link slight, change in topic - if one uses cygwin setfacl to add multiple acls ( say rwx access to 4 different users, one acl per user ) to a file, is there a way to copy a file using cygwin in a way that preserves these? -- thank-you, Tom -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/