YAMAMOTO Takashi wrote:

> as far as you hide it by a sane api, there's nothing wrong with
> using memcmp (or memcmp-like loop which compares each gids) internally.

The thing is, there's a different meaning to cr_groups in kauth(9),
so I'm not sure (yet) how possible it will be to use memcmp() or such.

> btw, i think the name "kauth_cred_compare" should be reserved for
> a function which compares two kauth_cred_t. :-)

Yeah... it's also very misleading because it compares kauth_cred_t
with a struct uucred. :) I guess I'll name it kauth_cred_uucmp()?

-e.

-- 
Elad Efrat