Mailing List Archive

[Bug 1412] Support for users in more than 16 groups on Mac OS X.
https://bugzilla.mindrot.org/show_bug.cgi?id=1412


Damien Miller <djm@mindrot.org> changed:

What |Removed |Added
----------------------------------------------------------------------------
Attachment #1407| |ok?(dtucker@zip.com.au)
Flag| |




--- Comment #3 from Damien Miller <djm@mindrot.org> 2008-01-20 06:49:36 ---
(From update of attachment 1407)
Seems reasonable to me. Darren, can you see any problems with this?

--
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
_______________________________________________
openssh-bugs mailing list
openssh-bugs@mindrot.org
https://lists.mindrot.org/mailman/listinfo/openssh-bugs
[Bug 1412] Support for users in more than 16 groups on Mac OS X. [ In reply to ]
https://bugzilla.mindrot.org/show_bug.cgi?id=1412


Darren Tucker <dtucker@zip.com.au> changed:

What |Removed |Added
----------------------------------------------------------------------------
CC| |dtucker@zip.com.au




--- Comment #4 from Darren Tucker <dtucker@zip.com.au> 2008-01-20 09:42:24 ---
(In reply to comment #3)
> (From update of attachment 1407 [details])
> Seems reasonable to me. Darren, can you see any problems with this?

I'd like to understand why it's needed first, given that there's
already an initgroups() call in session.c.

--
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.
_______________________________________________
openssh-bugs mailing list
openssh-bugs@mindrot.org
https://lists.mindrot.org/mailman/listinfo/openssh-bugs
[Bug 1412] Support for users in more than 16 groups on Mac OS X. [ In reply to ]
https://bugzilla.mindrot.org/show_bug.cgi?id=1412





--- Comment #5 from Disco Vince Giffin <vgiffin@apple.com> 2008-01-22 13:19:08 ---
This patch should probably be within the #else portion of the above
#ifdef and/or within an #ifdef __APPLE__.

--
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.
_______________________________________________
openssh-bugs mailing list
openssh-bugs@mindrot.org
https://lists.mindrot.org/mailman/listinfo/openssh-bugs
[Bug 1412] Support for users in more than 16 groups on Mac OS X. [ In reply to ]
https://bugzilla.mindrot.org/show_bug.cgi?id=1412





--- Comment #6 from Disco Vince Giffin <vgiffin@apple.com> 2008-01-22 13:24:20 ---
(In reply to comment #4)
> (In reply to comment #3)
> > (From update of attachment 1407 [details] [details])
> > Seems reasonable to me. Darren, can you see any problems with this?
>
> I'd like to understand why it's needed first, given that there's
> already an initgroups() call in session.c.

Our (Apple's) implementation of initgroups() opts you in to using
memberd (which gives you the ability to be in more than 16 groups).
For conformance and compatibility reasons, certain calls will opt you
out of this behavior. The setgid() call just above this patch opts out
of using more than 16 groups. The patch to call initgroups() again is
required to opt back in. Basically, initgroups has to be called after
any setgroups(), setgid(), etc., if you want to use more than 16
groups.

--
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.
_______________________________________________
openssh-bugs mailing list
openssh-bugs@mindrot.org
https://lists.mindrot.org/mailman/listinfo/openssh-bugs