Too Many Permissions Stripped In 1.7.35?

[Corinna Vinschen]

On Feb 26 15:51, Bryan Berns wrote:
> > That's not really a goal.  The SYSTEM permissions are kind of useless
> > anyway, given that SYSTEM has permissions to read and write all files
> > anyway.  I don't see that a rule to add SYSTEM permissions to all files
> > accomplishes anything which isn't already available anyway.
> 
> I don't think this is true; see below when running as the system account:
> 
> V:\>echo %USERNAME%
> BERNS-WINDOWS$
> V:\>icacls V:\Test
> V:\Test DOMAIN\Administrator:(OI)(CI)(F)
> Successfully processed 1 files; Failed processing 0 files
> V:\>cd V:\Test
> Access is denied.
> V:\>

You just have to enable the SeBackupName and SeRestoreName privs.
Try in Cygwin.  It does that automatically.

For cases where you need to stick to the Windows ACLs, use noacl
mounts.


Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <http://cygwin.com/pipermail/cygwin/attachments/20150226/dfc7c31a/attachment.sig>