This is the mail archive of the cygwin mailing list for the Cygwin project.

Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

Re: Problem with "None" Group on Non-Domain Members

On 05/05/2014 02:56 PM, Chris J. Breisch wrote:
Corinna Vinschen wrote:
On May  5 12:17, Chris J. Breisch wrote:
Corinna Vinschen wrote:
An strace of `chmod 400 bar' might sched some light on this issue, but I
have a gut feeling the underlying WIndows call will not even return an
error code...
Attached. Your gut seems to be working today...

There *is* something weird here.  Look at this:

   151   36702 [main] chmod 5536 alloc_sd: uid 1001, gid 513, attribute
    65   36767 [main] chmod 5536 cygsid::debug_print: alloc_sd: owner SID
= S-1-5-21-3514886939-1786686319-3519756147-1001 (+)
    70   36837 [main] chmod 5536 cygsid::debug_print: alloc_sd: group SID
= S-1-5-21-3514886939-1786686319-3519756147-1001 (+)

alloc_sd (the underlying function creating a security descriptor) gets
a uid 1001 and gid 513 as input, as usual.  But the owner *and* group
SIDs of the file's existing security descriptor is
S-1-5-21-3514886939-1786686319-3519756147-1001, the SID of your user

Why is your user account the primary group of the file, even though
your user token definitely has "None" (513) as its primary group?
How did it get there?

I don't have a clue. You're the expert. :)

The ACLs are a little different between the Microsoft Account and the
regular local account. But, if anything, it's the regular one that looks odd
to me.

Microsoft Account:
$ icacls bar
bar WIN8-VM\Chris:(R,D,WDAC,WO,WA)
     NT AUTHORITY\Authenticated Users:(M)

Local account:
$ icacls foo
foo WIN8-VM\cjb:(R,D,WDAC,WO,WA)

Why does the local account have None permissions, and not Authenticated Users?

POSIX permissions are user, group, other.  For your local account, that's
user = cib, group = None, other = Everyone.  Of course, I'm assuming that
foo was made using Cygwin utilities...

I'm wondering if we're getting the user id as the group for the MS
Account because there is no group id.  Chris, what does 'id' for
each of these accounts look like and is the group id (assuming they
are different that the user id) in there?



A: Yes.
> Q: Are you sure?
>> A: Because it reverses the logical flow of conversation.
>>> Q: Why is top posting annoying in email?

Problem reports:
Unsubscribe info:

Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]