Re: [ANNOUNCEMENT] TEST RELEASE: Cygwin 2.4.0-0.4

[Corinna Vinschen <corinna-cygwin at cygwin dot com>]

On Nov 29 02:16, Andrey Repin wrote:
> Greetings, Kacper Michajlow!
> 
> >> Please also attach the output of `id' and of `getfacl . test test/test'.
> 
> > getfacl attached. `id` output is already in cygcheck.log
> 
> > In getfacl output this line `default:group:1001 <unknown>:r-x` looks
> 
> Uh-oh.
> Do you, by any chance, have /etc/passwd file?
> Or a user comment changing relevant information?

I agree with Andrey here: Uh oh!

The mkdir trace contains a suspicious snippet which is the reason
the mkdir call doesn't manage to post-process the ACL:

  [...] pwdgrp::fetch_account_from_windows: LookupAccountSidW (S-1-5-32-1001), Win32 error 1332
  [...] /[...]/security.cc:337 status 0xC0000078 -> windows error 1337

Status 0xC0000078 aka Win32 error 1337 means "invalid SID".  And the
SID 1-5-32-1001 is in fact invalid.  The S-1-5-32 prefix denotes a builtin
account, but the RID 1001 is invalid for a builtin group.  1001 is the
RID of your user account, though, but that would be prefixed by the SID
of your machine, which looks like S-1-5-21-XXXXXXXX-YYYYYYYY-ZZZZZZZZ.
I don't see how this broken SID came into life, unless your /etc/passwd
and/or /etc/group files are broken (hand edited perhaps?).

You're aware that you don't need the /etc/passwd and /etc/group files
anymore, aren't you?  https://cygwin.com/cygwin-ug-net/ntsec.html

For testing I'd like you to do the following:

- Edit /etc/nsswitch,conf and change the "passwd:" and "group:" lines
  to omit checking the passwd and group files:

    passwd: db
    group: db

- Exit all Cygwin processes and restart a shell.

- Call `id' again and attach it to your reply.  The uids and gids of
  your account and primary group should be different now.

- Remove the test dir, call `mkdir -p test/test' and call icacls on test
  and test/test.

- Try chmod 755 test/test again.

- Also, would you mind to attach your /etc/passwd, /etc/group and
  /etc/nsswitch.conf files to your reply?


Thanks,
Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

Attachment: pgp4TfVqpXFeX.pgp
Description: PGP signature