<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
Matt Mackall wrote:
<blockquote cite="mid20050808215224.GJ31167@waste.org" type="cite">
<pre wrap="">On Mon, Aug 08, 2005 at 11:19:52PM +0200, Vadim Lebedev wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Matt Mackall wrote:
</pre>
<blockquote type="cite">
<pre wrap="">On Mon, Aug 08, 2005 at 10:20:13PM +0200, Vadim Lebedev wrote:
</pre>
<blockquote type="cite">
<pre wrap="">It seems that the only way to have this stuff working correctly is to
change default login group for
all people who are pushing to the central repo, which is a PITA....
Any ideas?
</pre>
</blockquote>
<pre wrap="">All you need to do is add a line like this to /etc/group:
sensor:x:10002:noise,velouria,antron,danger,bleep
^ ^ ^ ^
| | | ` people in the group
| | ` unique group id
| ` group password, use 'x'
` name of the group
</pre>
</blockquote>
<pre wrap="">It doesn't work because when hg tries to access the repo the effective
group id is different
from the group id of the repo....
</pre>
</blockquote>
<pre wrap=""><!---->
Eh? You know you can be a member of multiple groups at a time. There's
a "default" group id and a bunch of supplementary ones.
</pre>
</blockquote>
Yes,<br>
but at the moment of the file access the kernel verifies the access
only for your effective group (and user) id...<br>
To change effective user id you have to use newgrp and sg commands or
setgid syscall....<br>
Actually the kernel is completely unaware of the fact that you are a
member of multiple groups...<br>
only nwgrp or sg commands are accessing the /etc/group file to verify
that you can execute newgrp or sg commands with given argument .<br>
<br>
<br>
Vadim<br>
<br>
</body>
</html>