Re: Groups in the alternative user solution

[Ivan Gyurdiev <gyurdiev@xxxxxxxxxx>]

> > I didn't understand the reasoning there either,
> > particularly as we
> > aren't dealing with the effective GID but the entire
> > authorized group
> > list for the user since we are only doing this once
> > at login/su time.
> 
> I hope this has clarified the group vs.
> group list confusion.

Yes, I understand how it would work.
What's not clear is why you want to match on group
list as opposed to matching on group membership alone.
How is that helpful to the sysadmin - seems awfully 
fragile. What happens to this file if I add the user 
to another group?




--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.