Users are allowed to belong to multiple groups in the OpenExtensions VM environment. A user's primary or default group is defined in the GROUP field of his logonid. A user can change to another group with the OpenExtensions VM setgid() or setegid() functions or with the shell newgrp command. These additional groups are called supplemental groups.
To allow a user to use his primary group and groups other than the default group, you must create POSIX Supplemental Group resource rules for the group. The default resource type of POSIX Group rules is PGR.
The POSIXGRP field of the RESCLASS VMO record defines the type code for the POSIX group rules. You can modify this RESCLASS field.
The following example gives the previously mentioned users access to their primary groups:
COMPILE $KEY(ROOT) TYPE(PGR) UID(MAINT) ALLOW UID(ROOT) ALLOW $KEY(STAFF) TYPE(PGR) UID(DAEMON) ALLOW $KEY(BIN) TYPE(PGR) UID(BIN) ALLOW $KEY(SYS) TYPE(PGR) UID(SYS) ALLOW $KEY(ADM) TYPE(PGR) UID(ADM) ALLOW
|
Copyright © 2009 CA Technologies.
All rights reserved.
|
|