Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Improve tsusers/tsadmins group support #2815

Merged
merged 4 commits into from
Oct 6, 2023

Commits on Oct 3, 2023

  1. Add getgrouplist() detection functionality

    Defines the macro HAVE_GETGROUPLIST if getgrouplist() is
    available, and defines the type passed to the GID array as
    GETGROUPS_T
    matt335672 committed Oct 3, 2023
    Configuration menu
    Copy the full SHA
    84a0bef View commit details
    Browse the repository at this point in the history

Commits on Oct 4, 2023

  1. Add getgrouplist() support to os_calls

    On enterprise systems, using getgrouplist() (if available)
    is more efficient than iterating over the members of the group,
    and is also more likely to work
    matt335672 committed Oct 4, 2023
    Configuration menu
    Copy the full SHA
    cf677da View commit details
    Browse the repository at this point in the history

Commits on Oct 5, 2023

  1. access_login_allowed: Remove primary group check

    This check is now performed within g_check_user_in_group()
    matt335672 committed Oct 5, 2023
    Configuration menu
    Copy the full SHA
    5837dea View commit details
    Browse the repository at this point in the history
  2. Update logging in sesman access control

    Improve the built-in access checks for sesman/sesexec:-
    - Group existence is checked for at login-time rather than program
      start time
    - The name of the group is now included in the message
    
    Also, check for UID == 0 when checking for root, rather than just
    checking the name (which might be an alias)
    matt335672 committed Oct 5, 2023
    Configuration menu
    Copy the full SHA
    cf5c271 View commit details
    Browse the repository at this point in the history