[Samba] access to files continues after removing user from group

Jeremy Allison jra at samba.org
Thu May 12 07:36:01 UTC 2016

On Wed, May 11, 2016 at 11:17:40AM -0500, Chad William Seys wrote:
> Hi Jeremy,
> >Because that's just the way the process model works.
> So security nuts didn't get involved early enough?  Or maybe there is some
> performance problem of checking on each access (at least back when model
> developed).
> Or maybe the process model is more like gravity?  That is how it is, but
> no-one knows why.  ;)

Think about scalability. Think about the number of processes
running on a box/cluster and the number of asynchronous notify
messages that would have to update the token of running processes
on every edit to the password/group db.

More information about the samba mailing list