Perl bug (was Re: [1.7] cygwin allows writing to readonly files)

[Reini Urban]

2009/8/11 Corinna Vinschen:
> On Aug 11 12:44, Reini Urban wrote:
>> 2009/8/11 Corinna Vinschen:
>> > That might be a good workaround nevertheless.  You should just test the
>> > list of supplementary groups as well, along these lines:
>>
>> We already have an ingroup() check in this Perl_cando() function, so
>> there is no
>> need to write it again. But it is disabled in perl core for this code path.
>> See http://perl5.git.perl.org/perl.git/blob/HEAD:/doio.c#l1929
>> It would be:
>>     if (ingroup(544,effective))
>>       return TRUE;            /* Administrators read and write anything */
>> but this is simply not true, as under unix. Windows Administrators
>> fall under the same ACL restrictions as normal users. So only using
>> access() is reliable.
>
> I don't understand what you're tryin to say.  The members of the Admin
> group have always write access to files due to the SE_BACKUP_NAME
> privilege enabled in Cygwin.

Okay, then the ingroup check should be used.
Thanks.
-- 
Reini Urban
http://phpwiki.org/           http://murbreak.at/

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple