On Nov 3, 2005, at 10:46 PM, Roland Illig wrote: > - Why should any kernel component want to compare the whole list > of groups? Indeed. A much better model (one that actually fits the way groups are generally used) is "is this user a member of this group?" -- thorpej