MS-DFSR conflict with cygwin file permissions

Stefan Walter stefan.walter@lisec-sw.com
Thu Apr 23 08:38:00 GMT 2009



Larry Hall (Cygwin) schrieb:
> Stefan Walter wrote:
>> Larry Hall (Cygwin) schrieb:
>>> Stefan Walter wrote:
>>>> If you redirect output in cmd.exe to a file (echo "Hello world..." 
>>>>  >output.txt), then the file "output.txt" have the file permissions 
>>>> inherited from the parent folder.
>>>>
>>>> If you redirect output in bash.exe to a file, then the file 
>>>> permissions are restricted.
>>>>
>>>> I need this solved, because the current given permission conflict 
>>>> with the Microsoft DFSr.
>>>>
>>>> Is there a way to create files with permissions inherited from 
>>>> parent folder?
>>>
>>> Read the section about NT security in the User's Guide
>>> <http://cygwin.com/cygwin-ug-net/ntsec.html> and then try setting 
>>> 'nontsec'
>>> in your CYGWIN environment variable
>>> <http://cygwin.com/cygwin-ug-net/using-cygwinenv.html>.
>>>
>> That was a great hint.
>>
>> I tried it now with "CYGWIN=nontsec tty" and the permission are as i 
>> wanted it.
>>
>> One more question with that. In the guides for "sshd" they always 
>> recommend "CYGWIN=ntsec tty". Do you expect a problem if i run with 
>> nontsec?
>
> Beyond the loss of the POSIX permissions, no.  You should check your
> 'sshd_config' file and make sure 'StrictModes' is set to 'no' though.
> 'tty' is not required for 'sshd'
>
The loss of the POSIX permissions is fine for me. But what is then the 
purpose of tty in the CYGWIN variable?

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/



More information about the Cygwin mailing list