Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.lang.python > #21477

[RFC] PEP 3143: supplementary group list concerns

Path csiph.com!usenet.pasdenom.info!gegeweb.org!de-l.enfer-du-nord.net!feeder2.enfer-du-nord.net!feeds.phibee-telecom.net!newsfeed.xs4all.nl!newsfeed6.news.xs4all.nl!xs4all!post.news.xs4all.nl!not-for-mail
Return-Path <jpokorny@redhat.com>
X-Original-To python-list@python.org
Delivered-To python-list@mail.python.org
X-Spam-Status OK 0.010
X-Spam-Evidence '*H*': 0.98; '*S*': 0.00; 'context': 0.04; 'e.g.,': 0.07; 'initialize': 0.07; 'python': 0.08; 'derived': 0.09; 'effect.': 0.09; 'interfaces': 0.12; '(via': 0.16; '1003.1-2001': 0.16; 'author,': 0.16; 'broader': 0.16; 'posix': 0.16; 'subject:PEP': 0.16; 'url:browse_thread': 0.16; 'url:thread': 0.16; 'subject:] ': 0.18; 'subject:skip:s 10': 0.18; 'jan': 0.19; 'seems': 0.20; 'cc:no real name:2**0': 0.21; '(i.e.,': 0.21; 'subject:list': 0.21; 'interface': 0.23; 'optional': 0.23; 'pep': 0.23; 'subject:group': 0.23; 'specify': 0.24; 'compatible': 0.26; 'cc:2**0': 0.26; '(in': 0.26; 'fact': 0.27; 'handling': 0.30; 'admit': 0.30; 'version': 0.32; "i've": 0.32; 'does': 0.32; 'list': 0.32; 'header:User-Agent:1': 0.33; 'it.': 0.33; 'yet,': 0.34; 'light': 0.35; 'from:charset:iso-8859-1': 0.35; 'probably': 0.35; 'to:addr:python-list': 0.35; 'subject:[': 0.35; 'something': 0.35; 'list.': 0.35; 'post': 0.36; 'extend': 0.36; 'question': 0.36; 'consistently': 0.37; 'hello,': 0.37; 'but': 0.37; 'charset :us-ascii': 0.37; 'another': 0.37; 'authors': 0.38; 'necessary.': 0.38; 'patch': 0.38; 'could': 0.38; 'should': 0.38; 'e.g.': 0.39; 'url:org': 0.39; 'option': 0.39; 'received:209': 0.39; 'user': 0.40; 'change': 0.40; 'to:addr:python.org': 0.40; 'target': 0.63; 'believe': 0.65; 'groups.': 0.68; '[3]': 0.73; '[4]': 0.73; 'realized': 0.73; 'concept': 0.74; 'spot': 0.79; 'cc:addr:lists.alioth.debian.org': 0.84; 'hood': 0.84; 'received:10.34': 0.84
Date Sun, 11 Mar 2012 03:29:55 +0100
From Jan Pokorný <jpokorny@redhat.com>
To python-list@python.org
Subject [RFC] PEP 3143: supplementary group list concerns
MIME-Version 1.0
Content-Type text/plain; charset=us-ascii; format=flowed
Content-Disposition inline
User-Agent Mutt/1.5.20 (2009-06-14)
X-Scanned-By MIMEDefang 2.67 on 10.5.11.12
Cc python-daemon-devel@lists.alioth.debian.org
X-BeenThere python-list@python.org
X-Mailman-Version 2.1.12
Precedence list
List-Id General discussion list for the Python programming language <python-list.python.org>
List-Unsubscribe <http://mail.python.org/mailman/options/python-list>, <mailto:python-list-request@python.org?subject=unsubscribe>
List-Archive <http://mail.python.org/pipermail/python-list>
List-Post <mailto:python-list@python.org>
List-Help <mailto:python-list-request@python.org?subject=help>
List-Subscribe <http://mail.python.org/mailman/listinfo/python-list>, <mailto:python-list-request@python.org?subject=subscribe>
Newsgroups comp.lang.python
Message-ID <mailman.556.1331433020.3037.python-list@python.org> (permalink)
Lines 42
NNTP-Posting-Host 2001:888:2000:d::a6
X-Trace 1331433020 news.xs4all.nl 6897 [2001:888:2000:d::a6]:36242
X-Complaints-To abuse@xs4all.nl
Xref csiph.com comp.lang.python:21477

Show key headers only | View raw


Hello,

in the light of a recent spot in Python Paste [1], I've come across
the python-daemon [2] implementation and found it also lacks support
for supplementary groups.

First, I just wanted to post a patch to the author, but realized
the broader context of PEP 3143 that would probably deserve
revisiting at the first place.  As the target Python version
seems not to be decided yet, I see a space for it.

If the spirit of solution [2] was to be followed (i.e., initialize
this list with all groups of which user derived from `uid` is
a member + group derived from `gid` (regardless if `uid`/`gid`
is explicit), no change of the PEP would be necessary.
This fact of intented handling of supplementary groups under the hood
still could be mentioned so the users and authors of compatible
interfaces are aware of this "detail".

Another way (in the spirit of systemd [3]) is to extend the interface
with an option (named, e.g., supplementary_groups) for optional
specification of supplemental groups.  The default would be something
as in the previous paragraph.

To be honest, I am not sure how consistently is the concept of
supplementary groups used across various *nixes.
POSIX seems to admit variances, e.g. (via [4]):
----v----
The System Interfaces volume of IEEE Std 1003.1-2001 does not specify
whether the effective group ID of a process is included in its
supplementary group list.
----^----

But I believe this should be addressed before the PEP in question is
brought into effect.

[2] http://groups.google.com/group/paste-users/browse_thread/thread/2aa651ba331c2471
[3] http://0pointer.de/public/systemd-man/systemd.exec.html
[4] http://pubs.opengroup.org/onlinepubs/000095399/utilities/newgrp.html

Regards,
Jan

Back to comp.lang.python | Previous | NextNext in thread | Find similar | Unroll thread


Thread

[RFC] PEP 3143: supplementary group list concerns Jan Pokorný <jpokorny@redhat.com> - 2012-03-11 03:29 +0100
  Re: [RFC] PEP 3143: supplementary group list concerns Ben Finney <ben+python@benfinney.id.au> - 2012-03-12 09:27 +1100
    Re: [RFC] PEP 3143: supplementary group list concerns Jan Pokorný <jpokorny@redhat.com> - 2012-03-12 00:41 +0100

csiph-web