From owner-freebsd-hackers@FreeBSD.ORG  Tue Aug 16 13:11:06 2005
Return-Path: <owner-freebsd-hackers@FreeBSD.ORG>
X-Original-To: freebsd-hackers@freebsd.org
Delivered-To: freebsd-hackers@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 884D216A41F
	for <freebsd-hackers@freebsd.org>; Tue, 16 Aug 2005 13:11:06 +0000 (GMT)
	(envelope-from joost@jodocus.org)
Received: from bps.jodocus.org (g157016.upc-g.chello.nl [80.57.157.16])
	by mx1.FreeBSD.org (Postfix) with ESMTP id EAF0643D46
	for <freebsd-hackers@freebsd.org>; Tue, 16 Aug 2005 13:11:05 +0000 (GMT)
	(envelope-from joost@jodocus.org)
Received: from jodocus.org (localhost [127.0.0.1])
	by bps.jodocus.org (8.13.3/8.13.1) with ESMTP id j7GDAnAU044765;
	Tue, 16 Aug 2005 15:10:49 +0200 (CEST)
	(envelope-from joost@jodocus.org)
Received: (from joost@localhost)
	by jodocus.org (8.13.3/8.13.1/Submit) id j7GDAYbw044764;
	Tue, 16 Aug 2005 15:10:34 +0200 (CEST) (envelope-from joost)
Date: Tue, 16 Aug 2005 15:10:34 +0200
From: Joost Bekkers <joost@jodocus.org>
To: Dmitry Agaphonov <rzhe@agava.com>
Message-ID: <20050816131034.GA44545@bps.jodocus.org>
Mail-Followup-To: Joost Bekkers <joost@jodocus.org>,
	Dmitry Agaphonov <rzhe@agava.com>, freebsd-hackers@freebsd.org
References: <20050816165115.2387c14f@rzhe.agava-dubna.local>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20050816165115.2387c14f@rzhe.agava-dubna.local>
User-Agent: Mutt/1.4.2.1i
Cc: freebsd-hackers@freebsd.org
Subject: Re: Shared memory permissions question
X-BeenThere: freebsd-hackers@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Technical Discussions relating to FreeBSD
	<freebsd-hackers.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>, 
	<mailto:freebsd-hackers-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-hackers>
List-Post: <mailto:freebsd-hackers@freebsd.org>
List-Help: <mailto:freebsd-hackers-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 16 Aug 2005 13:11:06 -0000

On Tue, Aug 16, 2005 at 04:51:15PM +0400, Dmitry Agaphonov wrote:
> Hello,
> 
> 
> I have user A from group G creating shared memory M with permissions
> 0060.  After this, A fails to attach M due to permission denied.
> However, another user B from the same group G successfully attaches M.
> User A manages to attach only if permissions 0600 added for M.
> 
> Why the system disregards group permissions for user A?  Is it correct
> behaviour?
> 
> This is happening on FreeBSD 4.11-STABLE.
> 

This is normal&correct behaviour.

Access if granted on a best match basis:

if user==owner then only user rights are applied
elseif user is member of group then only group rights are applied
else only 'other' rights are applied.

-- 
greetz Joost
joost@jodocus.org