[OpenAFS-devel] interesting issue with setgroups wrapper...

[Neulinger, Nathan]

Should all be tiny... since we do everything with afs acls we rarely use
supplementary groups except for a few select things like qmail and
oracle.=20

-- Nathan

------------------------------------------------------------
Nathan Neulinger                       EMail:  nneul@umr.edu
University of Missouri - Rolla         Phone: (573) 341-4841
Computing Services                       Fax: (573) 341-4216


> -----Original Message-----
> From: chas williams [mailto:chas@cmf.nrl.navy.mil]=20
> Sent: Friday, May 24, 2002 9:57 AM
> To: Neulinger, Nathan
> Cc: openafs-devel@openafs.org
> Subject: Re: [OpenAFS-devel] interesting issue with setgroups=20
> wrapper...=20
>=20
>=20
> >I just figured that this behavior is different than all the other
> >initgroups/setgroups behaviors. They both maintain the pag=20
> for all cases
> >other than the empty-group-list case. If it passes a list of groups -
> >i.e. if 'nobody' had some aux groups, it would maintain the pag.=20
>=20
> the patched syscall does try to maintain the pag.  however, if you
> issue a setgroup that is NGROUP_MAX, then the pag information is lost.
> i am not familiar with the samba code, but it probably doesnt expect
> that you need to leave 2 free slots on the end of the group list.
> it possibly builds a 'group context' (of size NGROUP_MAX) for you and
> your anonymous self.  then while swapping between these contexts your
> pag is 'lost' since there isnt any space at the end of the=20
> group array.
>=20
> you might try checking the size of the group list passed to setgroups
> in smbd.
>=20