about group membership
Subsystems (2)
Hi developers,
While i'm looking at the NFS (include v4), I didn't find any code which handle supplement group membership issues. so I'm curious how could NFS deal with following situations, or what's the plan to support:
- normal supplement groups
- setuid binaries
- setgroups binaries
Thanks!
MeiJia
-------------------------------------------------------
This SF.Net email is sponsored by Sleepycat Software
Learn developer strategies Cisco, Motorola, Ericsson & Lucent use to deliver higher performing products faster, at low TCO.
http://www.sleepycat.com/telcomwpreg.php?From=osdnemail3
_______________________________________________
NFS maillist - [email protected]
https://lists.sourceforge.net/lists/listinfo/nfs
Quoted 4 lines · MeiJia
While i'm looking at the NFS (include v4), I didn't find any code which handle supplement group membership issues. so I'm curious how could NFS deal with following situations, or what's the plan to support:
- normal supplement groups
Supplementary groups are transported in the AUTH_UNIX credentials. If you you use a different authentication flavor, supplementary groups are usually retrieved from the password database.
Quoted 1 line
- setuid binaries
Linux nfs normally uses the effective uid in any requests (if credentials are available; which is not a given for all auth flavors).
There is an option to fall back to the real uid in certain cases, but that is really more of a hack.
Quoted 1 line
- setgroups binaries
I think we just add the effective uid to the groups vector, if it is different from the rgid.
Olaf
Signature · 13 lines
Olaf Kirch | The Hardware Gods hate me. [email protected] | ---------------+ ------------------------------------------------------- This SF.Net email is sponsored by Sleepycat Software Learn developer strategies Cisco, Motorola, Ericsson & Lucent use to deliver higher performing products faster, at low TCO. http://www.sleepycat.com/telcomwpreg.php?From=osdnemail3 _______________________________________________ NFS maillist - [email protected] https://lists.sourceforge.net/lists/listinfo/nfs