freebsd security - Jun 2003 - user can't member more than 15 group

Hello All !

why freebd user can't member more than 15 group ?
my system is FreeBSD 4.8-RC

I need that scripts running
from user "master" make some changes if files that owned by other
users.
Shurely i can set UID of master to "0" but this increace vunerability
of system.

in /etc/group I add

user1:*:1001:master
...
user15:*:1015:master

--- all work Ok user master member of all user1-user15 groups
(this user "master" with ID!=0 , in server polisy reasons, must have
additional right for access to fises that belong
 user1 - userXX, if 775/664 right set to files)

 but if i add
user16:*:1016:master
user "master" not member of user16 group until i remove it from any
other groups == it can not write to files that onned by
user16:user16 and rights 664/775

I search in LINT but can not find anyone according to increase GROUP
LIMIT :(


Best regards,
 Mitch                          mailto:security@aka-root.com

On Wed, Jun 11, 2003 at 02:11:34AM +0400, Mitch wrote:
> 
> why freebd user can't member more than 15 group ?
in src/sys/sys/syslimits.h there is a constant named 'NGROUPS_MAX'.
change it to however many you need (within reason), rebuild/install world
and kernel.

-- 
- bill fumerola / fumerola@yahoo-inc.com / billf@FreeBSD.org / billf@mu.org