Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sources.redhat.com/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Date:	Fri, 28 Mar 2003 09:00:41 +0100
From:	Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To:	cygwin AT cygwin DOT com
Subject:	Re: Meaning of setegid() call in cygwin
Message-ID:	<20030328080041.GV23762@cygbert.vinschen.de>
Reply-To:	cygwin AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
References:	<F109cNZCpswn4Q9IB42000146ad AT hotmail DOT com>
Mime-Version:	1.0
In-Reply-To:	<F109cNZCpswn4Q9IB42000146ad@hotmail.com>
User-Agent:	Mutt/1.4i

On Thu, Mar 27, 2003 at 08:22:03PM -0800, Vishal Jain wrote:
> Hi,
> setegid() changes the primary group information in the access token.
> How does it impact access control on windows?
> I guess my question really boils down to-
> How is primary group used by windows in access control?

It's part of the security descriptor.  Well..., yes, that's it.
Microsoft states e. g.:

Primary Group   The Primary Group field contains the SID for the owner's
                primary group. This information is used only by the POSIX
		subsystem and is ignored by the rest of Windows 2000.

But that's not entirely true.  It's used for instance also in file access
using NFS or Mac clients.


Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Developer                                mailto:cygwin AT cygwin DOT com
Red Hat, Inc.

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

- Raw text -