Too Many Permissions Stripped In 1.7.35?

Thu Feb 26 20:24:00 GMT 2015

I honestly haven't read up exactly how Cygwin interprets NTFS
ACL/ACEs, but I remember seeing on the mailing list that a change was
made in 1.7.35 was made to permission handling. It is preferable in
my organization that the SYSTEM account always have full control the
local file system. When using chmod under 1.7.35, it looks like
permissions for SYSTEM get stripped (as well as some others). Is this
the desired behavior? If so, I'll workaround it somehow but just
wanted to verify before we release this much anticipated Active
Directory optimized version. For context, I'm running as the default
Domain Administrator on a fresh install of Windows 8.1.
@@@@@@ Testing With 1.7.34 @@@@@@
$ uname -a
CYGWIN_NT-6.3 BERNS-WINDOWS 1.7.34(0.285/5/3) 2015年02月04日 12:14 x86_64 Cygwin
$ mkdir TEST-34
$ chmod 750 TEST-34
$ icacls TEST-34
TEST-34 DOMAIN\Administrator:(F)
 DOMAIN\Domain Users:(RX)
 Everyone:(Rc,S,RA)
 BUILTIN\Administrators:(OI)(CI)(F)
 NT AUTHORITY\SYSTEM:(OI)(CI)(F)
 BUILTIN\Users:(OI)(CI)(RX)
 NT AUTHORITY\Authenticated Users:(M)
 NT AUTHORITY\Authenticated Users:(OI)(CI)(IO)(M)
 CREATOR OWNER:(OI)(CI)(IO)(F)
 CREATOR GROUP:(OI)(CI)(IO)(RX)
 Everyone:(OI)(CI)(IO)(RX)
Successfully processed 1 files; Failed processing 0 files
@@@@@@ Testing With 1.7.35 @@@@@@
$ uname -a
CYGWIN_NT-6.3 BERNS-WINDOWS 1.7.35(0.286/5/3) 2015年02月25日 13:13 x86_64 Cygwin
$ mkdir TEST-35
$ chmod 750 TEST-35
$ icacls TEST-35
TEST-35 DOMAIN\Administrator:(F)
 DOMAIN\Domain Users:(RX)
 Everyone:(Rc,S,RA)
 BUILTIN\Administrators:(OI)(CI)(RX)
 NT AUTHORITY\SYSTEM:(OI)(CI)(RX)
 BUILTIN\Users:(OI)(CI)(RX)
 NT AUTHORITY\Authenticated Users:(RX)
 NT AUTHORITY\Authenticated Users:(OI)(CI)(IO)
 CREATOR OWNER:(OI)(CI)(IO)(RX)
 CREATOR GROUP:(OI)(CI)(IO)(RX)
 Everyone:(OI)(CI)(IO)(RX)
Successfully processed 1 files; Failed processing 0 files
--
Problem reports: http://cygwin.com/problems.html
FAQ: http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple