Subject: Re: mount_portal questions
To: Brian C. Grayson <>
From: Bill Sommerfeld <>
List: tech-userlevel
Date: 07/27/1999 09:29:14
>   If uid (of the mount_portal child) == 0, lower our credentials
>     (including setgroups()) to those of the calling process,
>     i.e., use the code as it is.
>   Else, if uid of the mount_portal child match uid of the calling
>     process, and gid of the mount_portal child is contained in the
>     calling process' pcr_groups, then simply continue (skip
>     seteuid, setgroups, and setegid calls).


Shouldn't/couldn't this be handled by making the directories within
the portal filesystem mode 0700 and owned by the user who mounted the

					- Bill