Corinna Vinschen <corinna-cygwin <at> cygwin.com> writes:
> New 2.0.0-0.7 test release:
It looks like I found a bug or at least some extremely undesirable
behaviour. We back up some data via rsync, the script doesn't use the --acl
option yet (that will need to change). The bug happens without this option,
so rsync tries to preserve the modes, which ends up making the files
inaccessible. The file share we back up from have ACL to grant the access
only to certain groups and disallow to change the DACL. In trying to get
the modes set up in the same way, Cygwin rsync produces some DENY ACL that
will completely lock me out (the windows GUI will not only complain about
the order of ACL, it will also not show all ACL, so icacls is the only tool
that can be used from that point forward). I'm not really sure what rsync
is doing here... it may need to become smarter about that possibility.
(1020)...Backup_rsync/~2015-04-20_15~37 > `cygpath -S`/icacls ..
.. BUILTIN\Administrators:(I)(F)
BUILTIN\Administrators:(I)(OI)(CI)(IO)(F)
NT AUTHORITY\SYSTEM:(I)(F)
NT AUTHORITY\SYSTEM:(I)(OI)(CI)(IO)(F)
NT AUTHORITY\Authenticated Users:(I)(M)
NT AUTHORITY\Authenticated Users:(I)(OI)(CI)(IO)(M)
BUILTIN\Users:(I)(RX)
BUILTIN\Users:(I)(OI)(CI)(IO)(GR,GE)
Everyone:(I)(OI)(IO)(M,GA)
Everyone:(I)(CI)(F)
1 Dateien erfolgreich verarbeitet, bei 0 Dateien ist ein Verarbeitungsfehler
aufgetreten.
(1021)...Backup_rsync/~2015-04-20_15~37 > `cygpath -S`/icacls .
. NULL SID:(DENY)(Rc,S,REA,WEA,X,DC)
DOM\gratz:(F)
BUILTIN\Users:(DENY)(W,DC)
DOM\Domain Users:(RX,W,DC)
NT AUTHORITY\Authenticated Users:(RX,W,DC)
NT AUTHORITY\SYSTEM:(RX,W,DC)
BUILTIN\Administrators:(RX,W,DC)
BUILTIN\Users:(RX)
Everyone:(RX,W,DC)
NULL SID:(OI)(CI)(IO)(DENY)(Rc,S,REA,WEA,X,DC)
CREATOR OWNER:(OI)(CI)(IO)(F)
CREATOR GROUP:(OI)(CI)(IO)(DENY)(W,DC)
BUILTIN\Users:(OI)(CI)(IO)(DENY)(W,DC)
CREATOR GROUP:(OI)(CI)(IO)(RX)
NT AUTHORITY\Authenticated Users:(OI)(CI)(IO)(RX,W,DC)
NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(RX,W,DC)
BUILTIN\Administrators:(OI)(CI)(IO)(RX,W,DC)
BUILTIN\Users:(OI)(CI)(IO)(RX)
Everyone:(OI)(CI)(IO)(RX,W,DC)
1 Dateien erfolgreich verarbeitet, bei 0 Dateien ist ein Verarbeitungsfehler
aufgetreten.
(1022)...Backup_rsync/~2015-04-20_15~37 > `cygpath -S`/icacls \*
dir1 NULL SID:(DENY)(Rc,S,DC)
NT AUTHORITY\Authenticated Users:(DENY)(W,RD,REA,X,DC)
BUILTIN\Users:(DENY)(S,RD,REA,X)
NULL SID:(OI)(CI)(IO)(DENY)(Rc,S,REA,WEA,X,DC)
CREATOR GROUP:(OI)(CI)(IO)(DENY)(W,DC)
BUILTIN\Users:(OI)(CI)(IO)(DENY)(W,DC)
DOM\gratz:(D,Rc,WDAC,WO,RA,WA)
DOM\Domain Users:(Rc,S,RA)
NT AUTHORITY\Authenticated Users:(RX,W,DC)
NT AUTHORITY\SYSTEM:(RX,W,DC)
BUILTIN\Administrators:(RX,W,DC)
BUILTIN\Users:(RX)
Everyone:(Rc,S,RA)
CREATOR OWNER:(OI)(CI)(IO)(F)
CREATOR GROUP:(OI)(CI)(IO)(RX)
NT AUTHORITY\Authenticated Users:(OI)(CI)(IO)(RX,W,DC)
NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(RX,W,DC)
BUILTIN\Administrators:(OI)(CI)(IO)(RX,W,DC)
BUILTIN\Users:(OI)(CI)(IO)(RX)
Everyone:(OI)(CI)(IO)(RX,W,DC)
DOM\gratz:(OI)(CI)(F)
dir2 NULL SID:(DENY)(Rc,S,REA,WEA,X,DC)
DOM\gratz:(DENY)(S,RD,WD,AD,REA,WEA,X,DC)
NULL SID:(OI)(CI)(IO)(DENY)(Rc,S,REA,WEA,X,DC)
CREATOR GROUP:(OI)(CI)(IO)(DENY)(W,DC)
BUILTIN\Users:(OI)(CI)(IO)(DENY)(W,DC)
DOM\gratz:(D,Rc,WDAC,WO,RA,WA)
DOM\Domain Users:(RX,W,DC)
NT AUTHORITY\Authenticated Users:(RX,W,DC)
NT AUTHORITY\SYSTEM:(RX,W,DC)
BUILTIN\Administrators:(RX,W,DC)
BUILTIN\Users:(RX)
Everyone:(Rc,S,RA)
CREATOR OWNER:(OI)(CI)(IO)(F)
CREATOR GROUP:(OI)(CI)(IO)(RX)
NT AUTHORITY\Authenticated Users:(OI)(CI)(IO)(RX,W,DC)
NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(RX,W,DC)
BUILTIN\Administrators:(OI)(CI)(IO)(RX,W,DC)
BUILTIN\Users:(OI)(CI)(IO)(RX)
Everyone:(OI)(CI)(IO)(RX,W,DC)
DOM\gratz:(OI)(CI)(F)
2 Dateien erfolgreich verarbeitet, bei 0 Dateien ist ein Verarbeitungsfehler
aufgetreten.
(1023)...e/ADM_Backup_rsync/~2015-04-20_15~37 > getfacl .. . *
# file: ..
# owner: otheruser
# group: Domain Users
user::---
group::---
group:Authenticated Users:rwx
group:SYSTEM:rwx
group:Administrators:rwx
group:Users:r-x
mask:rwx
other:rwx
default:user::---
default:group::---
default:group:Authenticated Users:rwx
default:group:SYSTEM:rwx
default:group:Administrators:rwx
default:group:Users:r-x
default:mask:rwx
default:other:rwx
# file: .
# owner: gratz
# group: Domain Users
user::rwx
group::rwx
group:Authenticated Users:rwx
group:SYSTEM:rwx
group:Administrators:rwx
group:Users:r-x
mask:rwx
other:rwx
default:user::rwx
default:group::r-x
default:group:Authenticated Users:rwx
default:group:SYSTEM:rwx
default:group:Administrators:rwx
default:group:Users:r-x
default:mask:rwx
default:other:rwx
# file: dir1
# owner: gratz
# group: Domain Users
user::rwx
group::---
group:Authenticated Users:---
group:SYSTEM:rwx
group:Administrators:rwx
group:Users:---
mask:rwx
other:---
default:user::rwx
default:user:gratz:rwx
default:group::r-x
default:group:Authenticated Users:rwx
default:group:SYSTEM:rwx
default:group:Administrators:rwx
default:group:Users:r-x
default:mask:rwx
default:other:rwx
# file: dir2
# owner: gratz
# group: Domain Users
user::---
group::rwx
group:Authenticated Users:rwx
group:SYSTEM:rwx
group:Administrators:rwx
group:Users:r-x
mask:rwx
other:---
default:user::rwx
default:user:gratz:rwx
default:group::r-x
default:group:Authenticated Users:rwx
default:group:SYSTEM:rwx
default:group:Administrators:rwx
default:group:Users:r-x
default:mask:rwx
default:other:rwx
(1024).../Backup_rsync/~2015-04-20_15~37 > getfacl /cygdrive/x/dir1
# file: /cygdrive/x/dir1
# owner: otheruser
# group: Domain Users
user::---
group::---
group:ADM-FileOperators-L:rwx
group:PRJ-C-L:rwx
mask:rwx
other:---
default:user::---
default:group::---
default:group:ADM-FileOperators-L:rwx
default:group:PRJ-C-L:rwx
default:mask:rwx
default:other:---
(1025)...Backup_rsync/~2015-04-20_15~37 > getfacl /cygdrive/z/dir2
# file: /cygdrive/z/dir2
# owner: otheruser
# group: Domain Users
user::---
group::---
group:ADM-FileOperators-L:rwx
group:PRJ-R-L:r-x
group:PRJ-C-L:rwx
mask:rwx
other:---
default:user::---
default:group::---
default:group:ADM-FileOperators-L:rwx
default:group:PRJ-R-L:r-x
default:group:PRJ-C-L:rwx
default:mask:rwx
default:other:---
Regards,
Achim
--
Problem reports: http://cygwin.com/problems.html
FAQ: http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
