win dirs don't handle lack of inherited rule(?): getfacl + tar dir Warning: Cannot acl_to_text: Invalid argument

[Corinna Vinschen]

On Mar 12 08:45, L A Walsh wrote:
> On 3/10/2019 7:09 AM, Brian Inglis wrote:
> > Define this sh function, run it on problematic directories or files, and reply
> > with the output:
> >
> > # lsp - list permissions with ls, getfacl, icacls
> > lsp ()
> > {
> >     local p;
> >     for p in "$@";
> >     do
> >         ls --color=auto -dl "$p";
> >         getfacl "$p";
> >         icacls "$(cygpath -m ""$p"")";
> >     done
> > }
> >
> > e.g. and running my cygcheck sanitizer over the output:
> >   
> ---
>     What is your cygcheck sanitizer?  I don't think I'm familiar with it...
> 
> ok, the top directory of my Palemoon install just below the
> profiles dir has the problem from tar:
> 
> tar: default.nlaw-32: Warning: Cannot acl_to_text: Invalid argument
> Your script (thank you very much!), shows:
> 
> > lstp default.nlaw-32
> drwxrwx---+ 1 Bliss\law Bliss\lawgroup 0 Mar 12 08:30 default.nlaw-32
> # file: default.nlaw-32
> # owner: Bliss\law
> # group: Bliss\lawgroup
> user::rwx
> group::rwx
> group:TrustedInstaller:rwx
> group:SYSTEM:rwx
> group:Bliss\Domain Admins:rwx
> group:Administrators:rwx
> group:lawgroup:rwx
> mask::rwx
> other::---
> getfacl: default.nlaw-32: Invalid argument
> 
> default.nlaw-32 NULL SID:(DENY)(Rc,S,REA,WEA,X,DC)
>                 Bliss\law:(F)
>                 BLISS\lawgroup:(RX,W,DC)
>                 NT SERVICE\TrustedInstaller:(RX,W,DC)
>                 NT AUTHORITY\SYSTEM:(RX,W,DC)
>                 BLISS\Domain Admins:(RX,W,DC)
>                 BUILTIN\Administrators:(RX,W,DC)
>                 Athenae\lawgroup:(RX,W,DC)
>                 Everyone:(Rc,S,RA)
>                 Mandatory Label\High Mandatory Level:(I)(OI)(CI)(NW)
> 
> Successfully processed 1 files; Failed processing 0 files
> ------
> Does that give any insight into the problem?

Can you please create an acl file like this:

$ icacls default.nlaw-32 /save x.acl

and send the x.acl file?  This should allow me to create an equivalent
DACL for testing.


Thanks,
Corinna

-- 
Corinna Vinschen
Cygwin Maintainer
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://cygwin.com/pipermail/cygwin/attachments/20190312/6a999903/attachment.sig>