Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com Date: Fri, 28 Mar 2003 09:00:41 +0100 From: Corinna Vinschen To: cygwin AT cygwin DOT com Subject: Re: Meaning of setegid() call in cygwin Message-ID: <20030328080041.GV23762@cygbert.vinschen.de> Reply-To: cygwin AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4i On Thu, Mar 27, 2003 at 08:22:03PM -0800, Vishal Jain wrote: > Hi, > setegid() changes the primary group information in the access token. > How does it impact access control on windows? > I guess my question really boils down to- > How is primary group used by windows in access control? It's part of the security descriptor. Well..., yes, that's it. Microsoft states e. g.: Primary Group The Primary Group field contains the SID for the owner's primary group. This information is used only by the POSIX subsystem and is ignored by the rest of Windows 2000. But that's not entirely true. It's used for instance also in file access using NFS or Mac clients. Corinna -- Corinna Vinschen Please, send mails regarding Cygwin to Cygwin Developer mailto:cygwin AT cygwin DOT com Red Hat, Inc. -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Bug reporting: http://cygwin.com/bugs.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/