Patch from Jacob Appelbaum and me to make User option more robust, properly set supplementary groups, deprecated the Group option, and log more information on credential switching

svn:r17200

1 files changed, 7 insertions, 0 deletions

diff --git a/ChangeLog b/ChangeLog
index 4fd317f4a9..3b7eebe0ed 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -5,6 +5,13 @@ Changes in version 0.2.1.7-alpha - 2008-11-xx
       exit policy doesn't allow it, we would remember what IP address
       the relay said the destination address resolves to, even if it's
       an internal IP address. Bugfix on 0.2.0.7-alpha; patch by rovv.
+    - The "User" and "Group" config options did not clear the
+      supplementary group entries for the process. The "User" option
+      has been made more robust, and also now also sets the groups to
+      the specified user's primary group. The "Group" option is now
+      ignored. For more detailed logging on credential switching, set
+      CREDENTIAL_LOG_LEVEL in common/compat.c to LOG_NOTICE or higher;
+      patch by Jacob Appelbaum and Steven Murdoch.
 
   o Minor features:
     - Now NodeFamily and MyFamily config options allow spaces in