Subject: Re: CVS commit: src/sys
To: Elad Efrat <>
From: Darren Reed <>
List: tech-security
Date: 06/24/2007 09:47:24
Elad Efrat wrote:
> Darren Reed wrote:
>> Elad, how would you have solved this problem and also
>> achieved the side benefit of opening up use of NGROUPS
>> to become a tunable rather than a constant?
> since when is the 16bit group limit that horrible?

It isn't so much that it is a 16bit limit, but that it is a fixed limit at
compile time.

> the two issues are completely orthogonal. the change was done originally
> to save a malloc. that is a very, very weak argument. the "side benefit"
> has no effect whatsoever and you know that very well.

Well, how would you have done it better?