svn commit: r211393 - head/lib/libutil

M. Warner Losh imp at bsdimp.com
Fri Aug 20 18:41:09 UTC 2010


In message: <861v9ty7bg.fsf at ds4.des.no>
            Dag-Erling Smørgrav <des at des.no> writes:
: Attilio Rao <attilio at freebsd.org> writes:
: > Dag-Erling Smørgrav <des at des.no> writes:
: > > Perhaps the test in setusercontext() should be changed to use
: > > geteuid() instead of getuid().
: > Yes, I think that it probabilly makes more sense (geteuid() testing in
: > setusercontext()).
: 
: What if the user's ~/.login_conf sets a custom PATH, and the application
: switches back to root privs and fork()-exec()s some other program?

And we're back to the reason for why issetugid() :)

Warner


More information about the svn-src-all mailing list