[grsec] Questions about full learning / feature wish for learn_config

[Brad Spengler]

> Does this affect only the users primary group or any group a user is
> member of?

Group roles are based on GID, not any supplementary groups.  If it did 
involve supplementary groups, there would have to be some additional 
configuration involved, since you could have a user in group1 and 
group2 where group roles exist for both groups.  One thing that could be 
done in this case would be making the policy for that user the union of 
access for group1 and group2.  This seems like it may be useful.  If 
it's something people want, I'll add it to my TODO list.

-Brad
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://grsecurity.net/pipermail/grsecurity/attachments/20050311/bc4b80ed/attachment.pgp