FAQ SearchLogin
Tuxera Home
View unanswered posts | View active topics It is currently Sat May 15, 2021 05:10



Post new topic Reply to topic  [ 4 posts ] 
secaudit attributes set in Linux not seen in Windows 
Author Message

Joined: Fri Jun 01, 2007 15:55
Posts: 7
Post secaudit attributes set in Linux not seen in Windows
I'm using secaudit built from 2011.4.12AR6 to set ACLs and file attributes on files copied to a new filesystem mounted with ntfs-3g on linux. The ACLs are being applied, but the attributes (eg. hidden/archive/system/etc) are not taking effect when Windows boots. If I remount the filesystem under linux and use 'getattr -h -e hex -n system.ntfs_attrib_be', the attributes appear to be set, but Windows doesn't see them. If I use 'setattr -h -v 0x00000027 -n system.ntfs_attrib_be <filename>' and then reboot into windows, the attributes are set correctly. I know secaudit used to set the attributes properly (yes, I'm using '-e' on the command line). I'm not sure which version stopped working, but it seems to have worked in one of the 2010 releases.

Has anyone else seen this behavior?


Wed Sep 07, 2011 23:35
Profile

Joined: Fri Jun 01, 2007 15:55
Posts: 7
Post Re: secaudit attributes set in Linux not seen in Windows
It turns out that it does still work... sort of. I had recently added some setting of reparse data and 8.3 filenames in my code, and that was being done before running secaudit to apply the ACLs and attributes. If I run secaudit before setting the reparse points and 8.3 filenames, the attributes take effect in Windows. Weird...


Thu Sep 08, 2011 00:13
Profile
NTFS-3G Lead Developer

Joined: Tue Sep 04, 2007 17:22
Posts: 1286
Post Re: secaudit attributes set in Linux not seen in Windows
Hi,

Quote:
The ACLs are being applied, but the attributes (eg. hidden/archive/system/etc) are not taking effect when Windows boots.

This is a bug, the attributes were not properly set. Good catch.
Quote:
If I run secaudit before setting the reparse points and 8.3 filenames, the attributes take effect in Windows.

Good point, setting the file name restores the integrity of attributes.

Attached is a patch.

Thanks for reporting

Regards

Jean-Pierre


Attachments:
security.c.patch38.gz [253 Bytes]
Downloaded 789 times
Fri Sep 09, 2011 09:47
Profile

Joined: Fri Jun 01, 2007 15:55
Posts: 7
Post Re: secaudit attributes set in Linux not seen in Windows
Thanks!


Fri Sep 09, 2011 15:00
Profile
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 4 posts ] 


Who is online

Users browsing this forum: No registered users and 6 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
cron
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group.
Original forum style by Vjacheslav Trushkin.