* Bruce M Simpson <[EMAIL PROTECTED]> [2004-01-06 18:11 +0000]:
> On Tue, Jan 06, 2004 at 11:14:06AM -0500, Adil Katchi wrote:
> > I was just wondering if anyone has any ideas how it's possible for a user
> > that belongs to multiple groups to somehow limit his or her own capabilities
> > by using only one of the n groups that they belong to and be able to switch
> > between these groups?  For example, if userA belongs to groupA, groupB and
> > groupC, can userA enter a mode that would force it to only belong to groupA
> > (or groupB, or groupC)?  UserA whould be able to switch between these groups
> > and back to normal (ie. belong to all groups).
> 
> newgrp(1) could be hacked to do this fairly easily. Currently it preserves
> supplemental group memberships. An option to discard supplementals could
> be added.

But you shouldn't forget, you can deny access to a specific group now.
This won't work any longer, when users can leave groups at will.

Nicolas
_______________________________________________
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to