Re: Supplemental Groups
--- Chris Wright <chrisw(a)osdl.org> wrote:
> Don't we need that information?
I don't know, I don't think it's explicitly required
by CAPP (unless
you interpret subject identity to include
suplemental group IDs).
If the suplemental group information is used
to make access control decisions it needs to
be in the audit record. Same with the capabilities.
=====
Casey Schaufler
casey(a)schaufler-ca.com
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com