Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
X-Originating-IP: [66.206.205.2]
X-Originating-Email: [vxj45 AT hotmail DOT com]
From: "Vishal Jain" <vxj45 AT hotmail DOT com>
To: cygwin AT cygwin DOT com
Subject: Meaning of setegid() call in cygwin 
Date: Thu, 27 Mar 2003 20:22:03 -0800
Mime-Version: 1.0
Content-Type: text/plain; format=flowed
Message-ID: <F109cNZCpswn4Q9IB42000146ad@hotmail.com>
X-OriginalArrivalTime: 28 Mar 2003 04:22:03.0348 (UTC) FILETIME=[958A4140:01C2F4E1]

Hi,
setegid() changes the primary group information in the access token.
How does it impact access control on windows?
I guess my question really boils down to-
How is primary group used by windows in access control?

user sid and sids of groups of which user is member is used to determine if 
user has access to a securable object.

I know that a new object would get primary group from the access token if it 
is not specified in security descriptor.
But where is primary group of an object used?

How is it different from owner of an object?
What's its purpose?

What does changing primary group of an access token mean?

Thanks,

Vishal

_________________________________________________________________
Add photos to your e-mail with MSN 8. Get 2 months FREE*.  
http://join.msn.com/?page=features/featuredemail


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/