[SSSD] [PATCH] sss_groupshow - a utility to print properties of a local group

Simo Sorce ssorce at redhat.com
Mon Jan 18 17:57:18 UTC 2010


On Mon, 18 Jan 2010 11:58:25 -0500
Stephen Gallagher <sgallagh at redhat.com> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> On 01/18/2010 11:28 AM, Sumit Bose wrote:
> > On Fri, Jan 15, 2010 at 06:55:29PM +0100, Jakub Hrozek wrote:
> >> -----BEGIN PGP SIGNED MESSAGE-----
> >> Hash: SHA1
> >>
> >> On 01/15/2010 06:24 PM, Jakub Hrozek wrote:
> >>> On 01/15/2010 06:22 PM, Jakub Hrozek wrote:
> >>>> This patch adds a utility called sss_groupshow that allows user
> >>>> to print properties of a group in the local domain.
> >>>
> >>>> Fixes: #306
> >>>
> >>> Self-nack, I realized it is missing changes to specfile, sorry
> >>> for the noise..
> >>
> >> Revised patch attached.
> > 
> > Works nice, but can you add _() to the default output so it can get
> > translated?
> > 
> > bye,
> > Sumit
> 
> I noticed that this is a root-only tool, like the others. I'm not sure
> that any of this information is necessarily root-sensitive. Is there a
> reason not to allow any user to view the heirarchy?

It is not exported through public interfaces, so in order to allow
normal users to use it you'd have to make it setuid root.
Not really worth it.

Simo.


-- 
Simo Sorce * Red Hat, Inc * New York



More information about the sssd-devel mailing list