https://bz.apache.org/bugzilla/show_bug.cgi?id=66354

            Bug ID: 66354
           Summary: Invoked "bin\tomcat9 //US/Tomcat9", logs directory
                    will be inserted two unwanted two ACLs
           Product: Tomcat 9
           Version: 9.0.69
          Hardware: PC
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Packaging
          Assignee: dev@tomcat.apache.org
          Reporter: nor...@sainet.or.jp
  Target Milestone: -----

Invoked "bin\tomcat9 //US/Tomcat9", logs directory will be inserted unwanted
two ACLs.

Repro at Tomcat9 directory on Admin Command Prompt (not Admin PowerShell).
* Used Tomcat 9 zip-x86 distro.
* Windows 7 x64.
* Tomcat 9.0.69's bin\Tomcat9.exe is Apache Commons Daemon 1.3.2.

> ren logs logs1

> md logs

> icacls logs
logs NT AUTHORITY\Authenticated Users:(I)(OI)(CI)(M)
     NT AUTHORITY\SYSTEM:(I)(OI)(CI)(F)
     BUILTIN\Administrators:(I)(OI)(CI)(F)
     BUILTIN\Users:(I)(OI)(CI)(M)

> bin\tomcat9.exe //US/Tomcat9

> icacls logs
logs NT AUTHORITY\LOCAL SERVICE:(RX,W)
     NT AUTHORITY\LOCAL SERVICE:(OI)(CI)(IO)(GR,GW,GE)
     NT AUTHORITY\Authenticated Users:(I)(OI)(CI)(M)
     NT AUTHORITY\SYSTEM:(I)(OI)(CI)(F)
     BUILTIN\Administrators:(I)(OI)(CI)(F)
     BUILTIN\Users:(I)(OI)(CI)(M)

> bin\tomcat9.exe //US/Tomcat9

> icacls logs
logs NT AUTHORITY\LOCAL SERVICE:(RX,W)
     NT AUTHORITY\LOCAL SERVICE:(OI)(CI)(IO)(GR,GW,GE)
     NT AUTHORITY\LOCAL SERVICE:(RX,W)
     NT AUTHORITY\LOCAL SERVICE:(OI)(CI)(IO)(GR,GW,GE)
     NT AUTHORITY\Authenticated Users:(I)(OI)(CI)(M)
     NT AUTHORITY\SYSTEM:(I)(OI)(CI)(F)
     BUILTIN\Administrators:(I)(OI)(CI)(F)
     BUILTIN\Users:(I)(OI)(CI)(M)

> for /l %i in (1,0,1) do bin\tomcat9.exe //US/Tomcat9
  : (...after 1000-2000 times...)
[2022-11-18 17:46:20] [warn]  [ 2456] Failed to grant service user 'NT
AUTHORITY\LocalService' write permissions to log path
'<full/path/to/tomcat9>\logs' due to error '1340: The inherited access control
list (ACL) or access control entry (ACE) could not be built.'
  :

> icacls logs
logs NT AUTHORITY\LOCAL SERVICE:(RX,W)
     NT AUTHORITY\LOCAL SERVICE:(OI)(CI)(IO)(GR,GW,GE)
     NT AUTHORITY\LOCAL SERVICE:(RX,W)
     NT AUTHORITY\LOCAL SERVICE:(OI)(CI)(IO)(GR,GW,GE)
     NT AUTHORITY\LOCAL SERVICE:(RX,W)
     NT AUTHORITY\LOCAL SERVICE:(OI)(CI)(IO)(GR,GW,GE)
     NT AUTHORITY\LOCAL SERVICE:(RX,W)
     NT AUTHORITY\LOCAL SERVICE:(OI)(CI)(IO)(GR,GW,GE)
     NT AUTHORITY\LOCAL SERVICE:(RX,W)
  :
     NT AUTHORITY\LOCAL SERVICE:(RX,W)
     NT AUTHORITY\LOCAL SERVICE:(OI)(CI)(IO)(GR,GW,GE)
     NT AUTHORITY\Authenticated Users:(I)(OI)(CI)(M)
     NT AUTHORITY\SYSTEM:(I)(OI)(CI)(F)
     BUILTIN\Administrators:(I)(OI)(CI)(F)
     BUILTIN\Users:(I)(OI)(CI)(M)

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to