https://sourceware.org/git/gitweb.cgi?p=newlib-cygwin.git;h=66138cbee4ed784b4cafc00533ebb74b6cdbfff1

commit 66138cbee4ed784b4cafc00533ebb74b6cdbfff1
Author:     Corinna Vinschen <[email protected]>
AuthorDate: Fri Mar 8 21:30:57 2024 +0100
Commit:     Corinna Vinschen <[email protected]>
CommitDate: Mon Mar 11 15:29:51 2024 +0100

    Cygwin: get/set security descriptors using FILE_OPEN_NO_RECALL
    
    Add FILE_OPEN_NO_RECALL to NtOpenFile calls trying to fetch
    or write file security descriptors so as not to recall them
    from offline storage inadvertently.
    
    Signed-off-by: Corinna Vinschen <[email protected]>

Diff:
---
 winsup/cygwin/sec/base.cc | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/winsup/cygwin/sec/base.cc b/winsup/cygwin/sec/base.cc
index 8b04b40b4943..0fc8699bfc9e 100644
--- a/winsup/cygwin/sec/base.cc
+++ b/winsup/cygwin/sec/base.cc
@@ -65,7 +65,8 @@ get_file_sd (HANDLE fh, path_conv &pc, security_descriptor 
&sd,
                           fh ? pc.init_reopen_attr (attr, fh)
                              : pc.get_object_attr (attr, sec_none_nih),
                           &io, FILE_SHARE_VALID_FLAGS,
-                          FILE_OPEN_FOR_BACKUP_INTENT
+                          FILE_OPEN_NO_RECALL
+                          | FILE_OPEN_FOR_BACKUP_INTENT
                           | pc.is_known_reparse_point ()
                           ? FILE_OPEN_REPARSE_POINT : 0);
       if (!NT_SUCCESS (status))
@@ -129,7 +130,8 @@ get_file_sd (HANDLE fh, path_conv &pc, security_descriptor 
&sd,
                                  NULL, NULL);
       status = NtOpenFile (&fh, READ_CONTROL, &attr, &io,
                           FILE_SHARE_VALID_FLAGS,
-                          FILE_OPEN_FOR_BACKUP_INTENT
+                          FILE_OPEN_NO_RECALL
+                          | FILE_OPEN_FOR_BACKUP_INTENT
                           | FILE_OPEN_REPARSE_POINT);
       if (!NT_SUCCESS (status))
        {
@@ -234,7 +236,8 @@ set_file_sd (HANDLE fh, path_conv &pc, security_descriptor 
&sd, bool is_chown)
                                  : pc.get_object_attr (attr, sec_none_nih),
                               &io,
                               FILE_SHARE_VALID_FLAGS,
-                              FILE_OPEN_FOR_BACKUP_INTENT
+                              FILE_OPEN_NO_RECALL
+                              | FILE_OPEN_FOR_BACKUP_INTENT
                               | pc.is_known_reparse_point ()
                               ? FILE_OPEN_REPARSE_POINT : 0);
          if (!NT_SUCCESS (status))

Reply via email to