From owner-freebsd-security@FreeBSD.ORG  Tue Jun 10 16:09:46 2003
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 582B437B40B
	for <freebsd-security@freebsd.org>;
	Tue, 10 Jun 2003 16:09:46 -0700 (PDT)
Received: from avatar.ip-ua.net (avatar.ip-ua.net [212.1.90.1])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 6581B43FBD
	for <freebsd-security@freebsd.org>;
	Tue, 10 Jun 2003 16:09:44 -0700 (PDT)
	(envelope-from security@aka-root.com)
Received: from LIGHT (mxhinet.ip-ua.net [212.1.90.116])
	by avatar.ip-ua.net (8.12.8/8.12.8) with ESMTP id h5AN9cO7065961
	for <freebsd-security@freebsd.org>;
	Wed, 11 Jun 2003 02:09:39 +0300 (EEST)
	(envelope-from security@aka-root.com)
Date: Wed, 11 Jun 2003 02:11:34 +0400
From: Mitch <security@aka-root.com>
X-Mailer: The Bat! (v1.49)
X-Priority: 3 (Normal)
Message-ID: <75112397993.20030611021134@aka-root.com>
To: freebsd-security@freebsd.org
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Subject: user can't member more than 15 group
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: Mitch <security@aka-root.com>
List-Id: Security issues [members-only posting]
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Jun 2003 23:09:46 -0000

                Hello All !

why freebd user can't member more than 15 group ?
my system is FreeBSD 4.8-RC

I need that scripts running
from user "master" make some changes if files that owned by other users.
Shurely i can set UID of master to "0" but this increace vunerability
of system.

in /etc/group I add

user1:*:1001:master
...
user15:*:1015:master

--- all work Ok user master member of all user1-user15 groups
(this user "master" with ID!=0 , in server polisy reasons, must have
additional right for access to fises that belong
 user1 - userXX, if 775/664 right set to files)

 but if i add
user16:*:1016:master
user "master" not member of user16 group until i remove it from any
other groups == it can not write to files that onned by
user16:user16 and rights 664/775

I search in LINT but can not find anyone according to increase GROUP
LIMIT :(


Best regards,
 Mitch                          mailto:security@aka-root.com