URL: https://github.com/SSSD/sssd/pull/5404 Title: #5404: nss: check if groups are filtered during initgroups
sumit-bose commented: """ > > > Do you think that there's is someone who's using this behavior? > > > > > > Do you mean that somebody relies on the fact that a user can still be a > > member of a filtered group? > > Yes. IMHO since you can't resolve the group's name, you'd need to work with > gid only. And filtering out group only to match it by gid in user's > initgroups sounds like nonsense and we can just filter it from initgroups > unconditionally. Ok, thanks, then the patch can be used as it is, I've set the `Waiting for Review` label. """ See the full comment at https://github.com/SSSD/sssd/pull/5404#issuecomment-733060554
_______________________________________________ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
