[users@httpd] New features I added to sbox

["Zysman, Roiy" <ro...@intel.com>]

Hi all 

We use  'sbox' solution on one of our Apache web servers. I've noticed
that the script switches to the uid and gid but does not acquire any
other NFS groups that the user belong to.

I've added this functionality to the sbox (see attached) by using a
function from the groups.c file (the source code of 'groups' command)

My question is , Can any one think of why wasn't this functionality
added to the original script. 
Was it because of security issues ?

I would appreciate it if you can take a look at the modification and
reply with some feedback about it.

Thanks 

Roiy 


Sbox homepage - http://stein.cshl.org/software/sbox/