]> git.michaelhowe.org Git - packages/o/openafs.git/commit
DEVEL15-linux26-defer-cred-changing-20090511
authorSimon Wilkinson <sxw@inf.ed.ac.uk>
Mon, 11 May 2009 15:55:02 +0000 (15:55 +0000)
committerDerrick Brashear <shadow@dementia.org>
Mon, 11 May 2009 15:55:02 +0000 (15:55 +0000)
commit3b21ae60026d79fea2adeab1c1e954eaa5c60659
tree1fe1b22282c1a0f91cd35e708d9d3840b785b306
parent1c7cc2997122d02a6e76fc6f38511c41864642e4
DEVEL15-linux26-defer-cred-changing-20090511

LICENSE IPL10
FIXES 124737

Newer Linux kernels differentiate between the real and effective
credentials of a process, and prevent a process's credentials from being
change when the effective credentials have been set to a different value.
When AFS notices a keyring PAG exists but no group-based PAG does, the
attempt to rectify this, if done in a VFS call (which changes effective creds)
triggers this issue. We defer the change to the groups to avoid it.

(cherry picked from commit 7d530b9080f6dd4d7f7e4555ed6ce855ff81bcaa)
src/afs/LINUX/osi_cred.c