Re: The story behind UPG and umask.
Hi,
On Wed, May 26, 2010 at 01:00:49PM +0100, Roger Leigh wrote:
> > This one time, at band camp, Steve Langasek said:
> > > pam_umask requires both username == primary group name and uid == gid
> > > before it will assume UPG are in place when using its 'usergroups'
> > > option,
>
> I'd be interested to understand the upstream POV here--with current
> Debian systems, assuming UID==GID without additionally checking
> that the names match is horribly insecure.
See the text you quoted yourself, or am I missing something?
Michael
Reply to: