This is the mail archive of the cygwin mailing list for the Cygwin project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

Re: [ANNOUNCEMENT] Updated: Cygwin 1.7.35-1


Am 06.03.2015 um 13:51 schrieb Achim Gratz:
Corinna Vinschen <corinna-cygwin <at> cygwin.com> writes:
- Change handling of group permissions if owner SID == group SID.  Now the
   group permissions don't mirror the user permissions anymore, thus leading
   to less hassle with security-conscious applications.
There's another tricky situation that is not yet handled:

If the file is owned by myself and I'm in a group that allows full access
(but not ACL modifications), Cygwin will show that file as having mode
"---rwx---+".  Applications that follow POSIX semantics will interpret that
file as unreadable by the owner (==current user) and skip checking the group
permissions, while NTFS will still happily grant that access.
This may happen on Linux as well. Just tested on a NAS runnig Debian, in a "share" partition:
echo bla > x
chmod -rw x
ls -l x
---------- 1 towo share 4 Mar  7 09:59 x
cat x
bla

The same file mounted on Windows and handled by cygwin is also readable.

So in that situation the group permissions need to be promoted to the owner permissions.
I see no need to be more posixly here than other POSIX systems.
------
Thomas

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]