This is the mail archive of the
cygwin
mailing list for the Cygwin project.
Re: Too Many Permissions Stripped In 1.7.35?
- From: Bryan Berns <bryan dot berns at gmail dot com>
- To: cygwin at cygwin dot com
- Date: Thu, 26 Feb 2015 16:27:37 -0500
- Subject: Re: Too Many Permissions Stripped In 1.7.35?
- Authentication-results: sourceware.org; auth=none
- References: <CADi7v6JajieaQGq3N5LY2Ck2m7SiOTci6au5t7RL4gxZdvBgEw at mail dot gmail dot com> <87twy8cv4k dot fsf at Rainer dot invalid> <20150226202836 dot GB10024 at calimero dot vinschen dot de> <CADi7v6LLEhH9Dn3X3+W4Fk2=r7brDKuSHoJT3f7P31FX8523fg at mail dot gmail dot com> <20150226205736 dot GA10870 at calimero dot vinschen dot de>
> You just have to enable the SeBackupName and SeRestoreName privs.
> Try in Cygwin. It does that automatically.
>
> For cases where you need to stick to the Windows ACLs, use noacl
> mounts.
Understood --- I can probably set SeBackupPrivilege /
SeRestorePrivilege as 'RequiredPriveleges' for the services that
depend on the system account having access via the ACLs. Not being
used quite in the spirit of those privileges (i.e. for
backup/restore), but doable. We'll also have to revise our
permissions model on our network filers since before running 'chmod
700' on a file wouldn't blow away our various administrative groups.
Like I said originally, just wanted to verify it was desired behavior
and it sounds like it is. Thanks!
--
Problem reports: http://cygwin.com/problems.html
FAQ: http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple