On Feb 26 15:51, Bryan Berns wrote:
> > That's not really a goal.  The SYSTEM permissions are kind of useless
> > anyway, given that SYSTEM has permissions to read and write all files
> > anyway.  I don't see that a rule to add SYSTEM permissions to all files
> > accomplishes anything which isn't already available anyway.
> 
> I don't think this is true; see below when running as the system account:
> 
> V:\>echo %USERNAME%
> BERNS-WINDOWS$
> V:\>icacls V:\Test
> V:\Test DOMAIN\Administrator:(OI)(CI)(F)
> Successfully processed 1 files; Failed processing 0 files
> V:\>cd V:\Test
> Access is denied.
> V:\>

You just have to enable the SeBackupName and SeRestoreName privs.
Try in Cygwin.  It does that automatically.

For cases where you need to stick to the Windows ACLs, use noacl
mounts.


Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

Attachment: pgpVS1zidTafj.pgp
Description: PGP signature

Reply via email to