David, >My initial tests with >these Unix APIs were promising. In a few places they >refer to groups (plural) and I was hoping that the set >effective group ID profile accepted an array and I was >just dense. I think the plural "groups" the documentation is talking about are the real, effective, and saved groups. >...it looks like the set effective group GID should do what >I want, but just one at a time. I can retrieve the GID, >which appears to correspond to the GID I set on the >profile. When I pass it to the setegid API, it ends up >setting my group to *NONE. This does not sound right. If you change the effective group profile of the thread to the GID of a group profile, then you should not see *NONE as the group for that thread. > I am just calling qsysetegid() >with a 4-byte integer that contains the GID I get back >from getgrname(). > >Any ideas on whether this will work? This part sounds like it should work. These set group APIs allow you to set the group profile without changing the current user profile or any of the 15 supplemental groups. If you need to change any of the supplemental groups then the only way to do that is with the Set Profile Handle (QWTSETP, QsySetProfileHandle) API. Ed Fishel, edfishel@US.IBM.COM
As an Amazon Associate we earn from qualifying purchases.
Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.