Re: [NOT OFFTOPIC] Re: groups

David Meyer (paradox@paradoxisp.net)
Sun, 06 Sep 1998 22:24:39 +0000


>
> > > Is there any reason that normal users are not allowed to create and
> > > destroy groups? I think it would be nice if a user could create a
> ...
> > Well, for one thing, this is not kernel related. All the kernel does
>
> Yes, it *is* kernel releated, because the kind of problem solved by allowing
> normal users to create and destroy groups are some of the same problems that
> are solved by adding ACL support to the kernel and filesystem(s). Discussion
> of ACLs is kernel related, and so discussion of mechanisms that might reduce
> or eliminate the need for ACLs is also kernel related, even if a particular
> such mechanism is outside the kernel. The kernel does not exist in a
> vacuum.
>

I disagree! This is definately not a kernel related issue. If you want to let
users create groups, make a setuid root binary that will edit /etc/group
accordingly. I don't think the kernel *ever* accesses /etc/passwd or /etc/group.
The kernel is just responsible for making sure that the process which is run as
user/group is confined to that access.

Regards,
David

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/faq.html