security.cc and sec_acl.cc (ntsec, inheritance and sec_acl)

Corinna Vinschen cygwin-patches@cygwin.com
Mon Dec 16 09:43:00 GMT 2002


Hi Pierre,

On Mon, Dec 16, 2002 at 10:31:16AM -0500, Pierre A. Humblet wrote:
> I have a question: there is code in setacl (new line 139) to merge non-default
> ACE's with previous default ACEs.
> As the acl was sorted, I don't see how that code can ever be exercised. 
> Should we try to merge default ACEs with non-default ones? I am not sure it's 
> worth it.

the answer is "yes".

The incoming acls are Sun acls.  They could look like this:

   ...
   user:foo:rw-
   ...
   default:user:foo:rw-

That is a sorted acl, right?  When converting this into a Windows ACL
I'd like to see this as just one ACL, having the correct permissions
*plus* the inheritance attribute.  I don't see how that's incorrect?!?

Corinna



More information about the Cygwin-patches mailing list