This is the mail archive of the
cygwin
mailing list for the Cygwin project.
Re: Cygwin's ACL handling is NOT interoperable with Windows
- From: Marco Atzeri <marco dot atzeri at gmail dot com>
- To: cygwin at cygwin dot com
- Date: Sat, 4 Aug 2018 22:06:06 +0200
- Subject: Re: Cygwin's ACL handling is NOT interoperable with Windows
- References: <2B3187EFB48B477183C355EDF9660136@W340>
Am 04.08.2018 um 19:11 schrieb Stefan Kanthak:
Hi,
Hi Stefan,
<https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-files> states:
| There's just one problem when trying to map the POSIX permission model
| onto the Windows permission model.
...
| Canonical ACLs are unable to reflect each possible combination of POSIX
| permissions.
...
| Again: This works on all supported versions of Windows. Only the GUIs
| aren't able (or willing) to deal with that order.
These last two statements are wrong:
* the first statement holds ONLY because of the LIMITATION of the POSIX
permissions; it is WRONG for the general case, which ALL Windows
interfaces/components need to consider and handle, EVERYWHERE!
Cygwin aims to POSIX compliance, using the tool given by Windows.
Have you tested all the possible POSIX permissions and verified that
it is possible to replicate with windows ACL ?
Please note that ACL were not created by Microsoft.
* the second statement is a blatant lie: to guarantee CORRECT
interpretation of arbitrary ACLs, ALL Windows interfaces/components,
not just the "GUIs", MUST create CANONICAL ACLs only.
That is your opinion.
About the "lie", may I suggest you an old Italian classic
"Galateo of Manners & Behaviours by Giovanni Della Casa"
http://www.gutenberg.org/ebooks/47993
This especially means that not just Windows Explorer, but also the
command processor with its builtin COPY command as well as the
CopyFile() <https://msdn.microsoft.com/en-us/library/aa220078.aspx>
API (just to pick 3 examples) bring INHERITED ACEs into their PROPER
canonical order.
As Cygwin is a guest in the house of Windows, it should respect its hosts
house rules; instead it but violates them, and blames the host for its
faults!
What is your problem ?
If you don't like how cygwin is behaving, you can:
- stop to use it
- propose a change (with a patch of course)
- learn to use it without venting
Fix Cygwin's BUGGY ACL creation!
Cool down. You paid nothing, we own you nothing.
No one here is paid to solve your "theorical" problem;
if you know a better way to handle the POSIX permissions
show us the code and we can discuss.
regards
Stefan Kanthak
Best Regards
Marco
---
Diese E-Mail wurde von Avast Antivirus-Software auf Viren geprüft.
https://www.avast.com/antivirus
--
Problem reports: http://cygwin.com/problems.html
FAQ: http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple