Re: sudo doesn't add "dynamic groups"
"Todd C. Miller" <[email protected]>
| Newsgroups | gmane.comp.tools.sudo.devel |
|---|---|
| Message-ID | <[email protected]> |
The Linux su(1) calls pam_setcred(3) after setting the groups but before opening the session or changing the UID. Sudo opens the session early (before it forks) to avoid issues with certain PAM modules and sets the groups immediately before changing the UID. It should be possible to change the groups earlier (before pam_setcred) which ought to fix your issue. - todd ____________________________________________________________ sudo-workers mailing list <[email protected]> For list information, options, or to unsubscribe, visit: https://www.sudo.ws/mailman/listinfo/sudo-workers