Raito Bezarius
57373cba6f
`xucred` already contain `cr_ngroups` and `cr_groups`, we just have to use it properly. Change-Id: Ic29b4c551f9d93e86e9ed2bef20889d27d5438f4 Signed-off-by: Raito Bezarius <raito@lix.systems>
12 lines
561 B
Markdown
12 lines
561 B
Markdown
---
|
|
synopsis: "Supplementary groups are now supported for daemon authentication"
|
|
cls: [5021]
|
|
issues: [fj#968]
|
|
category: "Improvements"
|
|
credits: [raito, thubrecht, alois31, horrors]
|
|
---
|
|
|
|
macOS, FreeBSD and Linux now support receiving supplementary groups during UNIX domain authentication to a Lix daemon.
|
|
|
|
This change is particularly beneficial for systemd units with `DynamicUser=true` that need to connect to a Lix daemon, using a `SupplementaryGroups=` allocated by systemd in the context of the process. This is desirable if you wish to harden Lix clients.
|