From owner-freebsd-security  Sun Mar 18 22:58:51 2001
Delivered-To: freebsd-security@freebsd.org
Received: from lariat.org (lariat.org [12.23.109.2])
	by hub.freebsd.org (Postfix) with ESMTP
	id 09B2537B718; Sun, 18 Mar 2001 22:58:47 -0800 (PST)
	(envelope-from brett@lariat.org)
Received: from mustang.lariat.org (IDENT:ppp0.lariat.org@lariat.org [12.23.109.2])
	by lariat.org (8.9.3/8.9.3) with ESMTP id XAA06450;
	Sun, 18 Mar 2001 23:54:49 -0700 (MST)
Message-Id: <4.3.2.7.2.20010318234944.00e3a620@localhost>
X-Sender: brett@localhost
X-Mailer: QUALCOMM Windows Eudora Version 4.3.2
Date: Sun, 18 Mar 2001 23:54:30 -0700
To: Terry Lambert <tlambert@primenet.com>
From: Brett Glass <brett@lariat.org>
Subject: Re: about common group & user ID space (PR kern/14584)
Cc: tlambert@primenet.com (Terry Lambert),
	babkin@bellatlantic.net (Sergey Babkin), security@FreeBSD.ORG,
	wes@softweyr.com (Wes Peters), rwatson@FreeBSD.ORG (Robert Watson),
	fs@FreeBSD.ORG
In-Reply-To: <200103182339.QAA18696@usr05.primenet.com>
References: <4.3.2.7.2.20010318123759.00d9dd10@localhost>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

At 04:39 PM 3/18/2001, Terry Lambert wrote:

>I think that trying to make a user a member of 50,000 groups is
>probably a mistake, and it's not "arbitrary" to prevent this.

On the other hand, the current limit is quite low.

>There is really no limit on the number of members permitted in a
>group, I believe. 

I recently had to help out a client who hit that limit. He ran
a graphic arts house and wanted his customers to be able to 
FTP jobs in. So, he added them. One day, after about two
years, the system croaked because the group was too large.

--Brett


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message