Subject: Re: initgroups() [Was: Re: Announcing: UW IMAP toolkit 2000 Release Candidate 7] (fwd) (fwd)

From: Chris Newman <[email-masked]>
Date: Thu, 26 Oct 2000 11:16:32 -0700

--On Thursday, October 19, 2000 16:53 +0100 David Lee
<[email-masked]> wrote:
> Presumably shared mailboxes require initgroups() from the reader
> programs.  But would tmail need it?  (That is, can tmail (on the one
> hand) and the reader programs (on the other) be treated independently, or
> is their use of initgroups() intimately tied together?)

If you remove the initgroups() call, be sure to replace it with
setgroups(0, 0).  Otherwise you are introducing a security bug.

Note that initgroups() isn't thread safe on some Unix flavors, so people
who attempted to make c-client multi-threaded should check for this bug.

		  - Chris