Supplemental Groups

[Casey Schaufler]

--- Chris Wright <chrisw at osdl.org> wrote:


> > Don't we need that information?
> 
> I don't know, I don't think it's explicitly required
> by CAPP (unless
> you interpret subject identity to include
> suplemental group IDs).

If the suplemental group information is used
to make access control decisions it needs to
be in the audit record. Same with the capabilities.


=====
Casey Schaufler
casey at schaufler-ca.com

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com