Re: Setting user IDs and Groups

["David Morris" <David.Morris@xxxxxxxxxxxxx>]

Ed,

I meant to type setegid(). Passing a valid GID but running
under a user's profile, it sets the group profile to *NONE
for the job. I just thought that was strange and that the API
should have returned an error code and not changed
anything.

David Morris

>>> edfishel@us.ibm.com 02/01/02 06:40AM >>>

Dave,

>The seteuid() API does work with proper authority. It is
>odd to me that it set the group to *NONE if it is not running
>with *ALLOBJ. I just thought that was strange and that I
>should get back an error.

This still does not sound right. seteuid() only changes the effective
user.
It never changes the effective group. setegid() only changes the
effective
group. If 0 was passed for the gid then this indicates that the thread
should not have an effective group.

The only type of error you should expect from these "Unix" APIs is a
-1
return value. You then need to check errno to determine the cause of
the
error.

Ed Fishel,
edfishel@US.IBM.COM