pthread_setugid_np

[Zachary Loafman]

arch@ -

Isilon has need of per-thread impersonation. We're looking at
implementing something like the pthread_setugid_np mechanism found on
OS X, loosely documented in the code:

http://fxr.watson.org/fxr/source/bsd/kern/kern_prot.c?v=xnu-1228
(see settid and setgroups1)

and some here:
http://lists.apple.com/archives/perfoptimization-dev/2008/Jan/msg00043.html

Does anyone have strong objections to Apple's APIs here? There's
obviously no portable itnerface to handle it, and it seems a little
saner to just adopt someone else's API/semantics rather than reinvent.

-- 
Zach Loafman | Staff Engineer | Isilon Systems