POSIX permission mapping and NULL SIDs
Corinna Vinschen
corinna-cygwin@cygwin.com
Mon Jun 27 13:20:00 GMT 2016
On Jun 24 23:03, Bill Zissimopoulos wrote:
> On 6/24/16, 3:53 PM, "cygwin-owner@cygwin.com on behalf of Bill
> Zissimopoulos" <cygwin-owner@cygwin.com on behalf of
> billziss@navimatics.com> wrote:
>
>
> >One caveat is that Cygwin already maps S-1-5-7 to uid 7. So does that mean
> >that 7==nobody in Cygwin’s case?
>
> Here is output from Cygwin/SSHFS after mapping “nobody/nogroup” to S-1-5-7:
> <<
> billziss@windows:~$ cd /cygdrive/y
> billziss@windows:/cygdrive/y$ ls -la
> total 8
> drwxr-xr-x 1 billziss ANONYMOUS LOGON 0 Jun 23 23:57 .
> dr-xr-xr-x 1 billziss None 0 Jun 24 15:56 ..
> -rw-r--r-- 1 billziss ANONYMOUS LOGON 15 Jun 23 23:57 Foo.txt
> billziss@windows:/cygdrive/y$ cacls Foo.txt /S
> Y:\Foo.txt
> "D:P(A;;0x1f019f;;;S-1-5-21-383059176-2062642591-2866287538-1001)(A;;FR;;;A
> N)(A;;FR;;;WD)"
>
> billziss@windows:/cygdrive/y$ ls -lna
> total 8
> drwxr-xr-x 1 197609 7 0 Jun 23 23:57 .
> dr-xr-xr-x 1 197609 197121 0 Jun 24 15:58 ..
> -rw-r--r-- 1 197609 7 15 Jun 23 23:57 Foo.txt
> billziss@windows:/cygdrive/y$
>
> >>
>
>
> Opinions?
Let's better not use anonymous. It could be a security risk. It might
not do harm, but it also might give unwanted access rights in some
scenarios.
Corinna
--
Corinna Vinschen Please, send mails regarding Cygwin to
Cygwin Maintainer cygwin AT cygwin DOT com
Red Hat
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <http://cygwin.com/pipermail/cygwin/attachments/20160627/c5ab1559/attachment.sig>
More information about the Cygwin
mailing list