Displaying 4 results from an estimated 4 matches for "gid_list2".
2018 Oct 11
2
macOS Mojave: setgroups(501) failed: Too many extra groups
On Thu, Oct 11, 2018 at 09:51:34AM +0300, Aki Tuomi wrote:
> > Looking at the source, I see this is handled in
> > src/lib/restrict-access.c::fix_groups_list(),
> > where above the call to setgroups() a gid_list2 is constructed. I
> > wonder if one could
> > have a config option to prevent adding all those extra groups, which
> > then make the
> > call to setgroups() fail
> Not trivially. We would need to know which groups to drop and which not.
Looking at id output
id
uid=50...
2018 Oct 11
3
macOS Mojave: setgroups(501) failed: Too many extra groups
...ly it is not
(easily) doable to reduce
the number of groups, as macOS seems to set them internally.
Is there a config option that I am missing to work around this?
Looking at the source, I see this is handled in
src/lib/restrict-access.c::fix_groups_list(),
where above the call to setgroups() a gid_list2 is constructed. I wonder
if one could
have a config option to prevent adding all those extra groups, which
then make the
call to setgroups() fail
Any help appreciated
Heiko
--
hwr at pilhuhn.de m:0179/207 4919 b:http://pilhuhn.blogspot.com
2018 Oct 11
0
macOS Mojave: setgroups(501) failed: Too many extra groups
On 11.10.2018 10:08, Heiko W. Rupp wrote:
> On Thu, Oct 11, 2018 at 09:51:34AM +0300, Aki Tuomi wrote:
>>> Looking at the source, I see this is handled in
>>> src/lib/restrict-access.c::fix_groups_list(),
>>> where above the call to setgroups() a gid_list2 is constructed. I
>>> wonder if one could
>>> have a config option to prevent adding all those extra groups, which
>>> then make the
>>> call to setgroups() fail
>
>> Not trivially. We would need to know which groups to drop and which not.
> Looking...
2018 Oct 11
0
macOS Mojave: setgroups(501) failed: Too many extra groups
...reduce
> the number of groups, as macOS seems to set them internally.
>
> Is there a config option that I am missing to work around this?
>
> Looking at the source, I see this is handled in
> src/lib/restrict-access.c::fix_groups_list(),
> where above the call to setgroups() a gid_list2 is constructed. I
> wonder if one could
> have a config option to prevent adding all those extra groups, which
> then make the
> call to setgroups() fail
>
> Any help appreciated
> ?? Heiko
>
Not trivially. We would need to know which groups to drop and which not.
Aki