X-Recipient: archive-cygwin AT delorie DOT com
X-SWARE-Spam-Status: No, hits=-2.4 required=5.0 	tests=AWL,BAYES_00,SPF_HELO_PASS
X-Spam-Check-By: sourceware.org
Message-ID: <49EFE9E2.104@cygwin.com>
Date: Thu, 23 Apr 2009 00:09:06 -0400
From: "Larry Hall (Cygwin)" <reply-to-list-only-lh AT cygwin DOT com>
Reply-To: cygwin AT cygwin DOT com
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.19) Gecko/20090101 Remi/2.0.0.19-1.fc8.remi Lightning/0.9 Thunderbird/2.0.0.19 Mnenhy/0.7.5.0
MIME-Version: 1.0
To: Cygwin List <cygwin AT cygwin DOT com>
Subject: Re: MS-DFSR conflict with cygwin file permissions
References: <49EFBEA8 DOT 8070609 AT lisec-sw DOT com> <49EFC69E DOT 3060402 AT cygwin DOT com> <49EFD253 DOT 40107 AT lisec-sw DOT com>
In-Reply-To: <49EFD253.40107@lisec-sw.com>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com

Stefan Walter wrote:
> Larry Hall (Cygwin) schrieb:
>> Stefan Walter wrote:
>>> If you redirect output in cmd.exe to a file (echo "Hello world..." 
>>>  >output.txt), then the file "output.txt" have the file permissions 
>>> inherited from the parent folder.
>>>
>>> If you redirect output in bash.exe to a file, then the file 
>>> permissions are restricted.
>>>
>>> I need this solved, because the current given permission conflict 
>>> with the Microsoft DFSr.
>>>
>>> Is there a way to create files with permissions inherited from parent 
>>> folder?
>>
>> Read the section about NT security in the User's Guide
>> <http://cygwin.com/cygwin-ug-net/ntsec.html> and then try setting 
>> 'nontsec'
>> in your CYGWIN environment variable
>> <http://cygwin.com/cygwin-ug-net/using-cygwinenv.html>.
>>
> That was a great hint.
> 
> I tried it now with "CYGWIN=nontsec tty" and the permission are as i 
> wanted it.
> 
> One more question with that. In the guides for "sshd" they always 
> recommend "CYGWIN=ntsec tty". Do you expect a problem if i run with 
> nontsec?

Beyond the loss of the POSIX permissions, no.  You should check your
'sshd_config' file and make sure 'StrictModes' is set to 'no' though.
'tty' is not required for 'sshd'

-- 
Larry Hall                              http://www.rfk.com
RFK Partners, Inc.                      (508) 893-9779 - RFK Office
216 Dalton Rd.                          (508) 893-9889 - FAX
Holliston, MA 01746

_____________________________________________________________________

A: Yes.
 > Q: Are you sure?
 >> A: Because it reverses the logical flow of conversation.
 >>> Q: Why is top posting annoying in email?

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/