|
|
Subscribe / Log in / New account

The trouble with dropping groups

The trouble with dropping groups

Posted Nov 20, 2014 23:54 UTC (Thu) by Comet (subscriber, #11646)
In reply to: The trouble with dropping groups by smurf
Parent article: The trouble with dropping groups

Predates any standardized ACL semantics, predates Linux support for ACLs, and was implemented on top of NFS.

The permissions-stripping group membership is very reliable in every Unix to date.

That doesn't mean it's not a little icky, or that we can't move forward with better ways today, but unless the better way also reliably supports both NFS (various protocol versions) and other operating systems (not everything is pure Linux) then demanding that everyone switch to doing things in a way which doesn't expose the Linux change as a security flaw is only going to create acrimony for the high-handedness.


to post comments


Copyright © 2025, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds