Page MenuHomeFreeBSD

MAC/do: Restore matching the first supplementary group
ClosedPublic

Authored by olce on Aug 29 2025, 11:03 PM.
Tags
None
Referenced Files
F158332526: D52271.id.diff
Sun, May 31, 5:58 AM
Unknown Object (File)
Sat, May 16, 1:12 AM
Unknown Object (File)
Sat, May 16, 1:12 AM
Unknown Object (File)
Sat, May 16, 1:11 AM
Unknown Object (File)
Tue, May 5, 9:58 AM
Unknown Object (File)
Apr 28 2026, 3:50 AM
Unknown Object (File)
Apr 28 2026, 12:48 AM
Unknown Object (File)
Apr 27 2026, 10:19 AM
Subscribers

Details

Summary

As 'cr_gid' was in fact stored in cr_groups[0],
rule_grant_supplementary_groups() would loop only on further elements of
cr_groups[]. Now that cr_groups[0] is not 'cr_gid' anymore, but some
supplementary group, take it into account.

cred: Update some comments after 'cr_gid' is no more cr_groups[0]

Fixes: be1f7435ef218b1d ("kern: start tracking cr_gid outside of cr_groups[]")
Sponsored by: The FreeBSD Foundation

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 66674
Build 63557: arc lint + arc unit