PSARC 2009/271 Credential Process Groups (CPGS)

[Boyd Adamson]

On 06/05/2009, at 1:54 AM, Garrett D'Amore wrote:
> Nicolas Williams wrote:
>> On Tue, May 05, 2009 at 04:36:36PM +1000, Boyd Adamson wrote:
>>
>>> I don't see any mention in the case materials of new fields for ps.
>>>
>>> Personally, I'd really like to see something like -o cpg
>>>
>>
>> The problem with ps(1) is that it produces column-oriented output,  
>> and
>> it has to prevent the columns from running on, into each other or the
>> right margin.  Displaying CPGs would be difficult.  Advice?
>>
> I concur with Nico here... I think that displaying CPGs would be  
> "difficult" here. "ps" is not intended to be able to display all  
> information about a process... although it does print a *lot* of  
> information. For example, you can not display saved, effective, and  
> real UIDs and GIDs associated with a process, with "ps". For that  
> kind of more complete information, you need "pcred". While "ps" does  
> display the single most relevant (current) value for the process, it  
> would be harder to do this for CPGs because there is no CPG that is  
> more relevant than any other.

I can see the problem. I can't immediately think of a solution, but an  
option that selects only processes that belong to a particular CPG (a  
la -p, -z, -t) may be useful and not too hard