1.3.19: Everyone has write access to .lnk symbolic link files

Bob.Burger@sagian.com Bob.Burger@sagian.com
Tue Feb 4 16:52:00 GMT 2003


The DACL of symbolic link files created by "ln -s" on NTFS partitions gives
Everyone write access to the .lnk file.

$ ln -s /tmp foo
$ cacls foo.lnk
D:\cygwin\home\rgburger\foo.lnk SAGEBECK\RGBURGER:(special access:)
                                                  STANDARD_RIGHTS_ALL
                                                  DELETE
                                                  READ_CONTROL
                                                  WRITE_DAC
                                                  WRITE_OWNER
                                                  SYNCHRONIZE
                                                  STANDARD_RIGHTS_REQUIRED
                                                  FILE_GENERIC_READ
                                                  FILE_GENERIC_WRITE
                                                  FILE_GENERIC_EXECUTE
                                                  FILE_READ_DATA
                                                  FILE_WRITE_DATA
                                                  FILE_APPEND_DATA
                                                  FILE_READ_EA
                                                  FILE_WRITE_EA
                                                  FILE_EXECUTE
                                                  FILE_READ_ATTRIBUTES
                                                  FILE_WRITE_ATTRIBUTES
                                 SAGEBECK\Domain Users:(special access:)
                                                      READ_CONTROL
                                                      SYNCHRONIZE
                                                      FILE_GENERIC_READ
                                                      FILE_GENERIC_WRITE
                                                      FILE_GENERIC_EXECUTE
                                                      FILE_READ_DATA
                                                      FILE_WRITE_DATA
                                                      FILE_APPEND_DATA
                                                      FILE_READ_EA
                                                      FILE_WRITE_EA
                                                      FILE_EXECUTE
                                                      FILE_READ_ATTRIBUTES
                                                      FILE_WRITE_ATTRIBUTES
                                Everyone:(special access:)
                                         READ_CONTROL
                                         SYNCHRONIZE
                                         FILE_GENERIC_READ
                                         FILE_GENERIC_WRITE
                                         FILE_GENERIC_EXECUTE
                                         FILE_READ_DATA
                                         FILE_WRITE_DATA
                                         FILE_APPEND_DATA
                                         FILE_READ_EA
                                         FILE_WRITE_EA
                                         FILE_EXECUTE
                                         FILE_READ_ATTRIBUTES
                                         FILE_WRITE_ATTRIBUTES

-------------- next part --------------
A non-text attachment was scrubbed...
Name: cygcheck.out
Type: application/octet-stream
Size: 17417 bytes
Desc: not available
URL: <http://cygwin.com/pipermail/cygwin/attachments/20030204/0859b66a/attachment.obj>
-------------- next part --------------
--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/


More information about the Cygwin mailing list