push problem

[Vadim Lebedev]

Matt Mackall wrote:

>On Mon, Aug 08, 2005 at 11:19:52PM +0200, Vadim Lebedev wrote:
>  
>
>>Matt Mackall wrote:
>>
>>    
>>
>>>On Mon, Aug 08, 2005 at 10:20:13PM +0200, Vadim Lebedev wrote:
>>>
>>>
>>>      
>>>
>>>>It seems that the only way to have this stuff working correctly is to 
>>>>change default login group for
>>>>all people who are pushing to the central repo,  which is a PITA....
>>>>
>>>>Any ideas?
>>>>  
>>>>
>>>>        
>>>>
>>>All you need to do is add a line like this to /etc/group:
>>>
>>>sensor:x:10002:noise,velouria,antron,danger,bleep
>>>^      ^  ^       ^
>>>|      |  |       ` people in the group
>>>|      |  ` unique group id
>>>|      ` group password, use 'x'
>>>` name of the group
>>>
>>>
>>>
>>>      
>>>
>>It doesn't work because when hg tries to access the repo the effective 
>>group id is different
>>from the group id of the repo....
>>    
>>
>
>Eh? You know you can be a member of multiple groups at a time. There's
>a "default" group id and a bunch of supplementary ones.
>
>  
>
Yes,
but at the moment of the file access the kernel verifies the access only 
for your effective group (and user) id...
To change effective user id you have to use newgrp and sg  commands or 
setgid syscall....
Actually the kernel is completely unaware of the fact that you are a 
member of multiple groups...
only nwgrp or sg commands are accessing the /etc/group file to verify 
that you can execute newgrp or sg commands with given argument .


Vadim

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.selenic.com/pipermail/mercurial/attachments/20050809/62bf3135/attachment.html