From owner-cvs-lib  Mon Mar 24 06:07:30 1997
Return-Path: <owner-cvs-lib>
Received: (from root@localhost)
          by freefall.freebsd.org (8.8.5/8.8.5) id GAA09090
          for cvs-lib-outgoing; Mon, 24 Mar 1997 06:07:30 -0800 (PST)
Received: from sovcom.kiae.su (sovcom.kiae.su [193.125.152.1])
          by freefall.freebsd.org (8.8.5/8.8.5) with SMTP id GAA09082;
          Mon, 24 Mar 1997 06:07:15 -0800 (PST)
Received: by sovcom.kiae.su id AA25969
  (5.65.kiae-1 ); Mon, 24 Mar 1997 16:28:58 +0300
Received: by sovcom.KIAE.su (UUMAIL/2.0); Mon, 24 Mar 97 16:28:57 +0300
Received: (from ache@localhost)
	by nagual.ru (8.8.5/8.8.5) id QAA00692;
	Mon, 24 Mar 1997 16:26:07 +0300 (MSK)
Date: Mon, 24 Mar 1997 16:26:06 +0300 (MSK)
From: =?KOI8-R?B?4c7E0sXKIP7F0s7P1w==?= <ache@nagual.ru>
To: Warner Losh <imp@freefall.freebsd.org>
Cc: CVS-committers@freefall.freebsd.org, cvs-all@freefall.freebsd.org,
        cvs-lib@freefall.freebsd.org
Subject: Re: cvs commit:  src/lib/libc/nls msgcat.c
In-Reply-To: <199703240615.WAA01092@freefall.freebsd.org>
Message-Id: <Pine.BSF.3.95q.970324162314.660C-100000@nagual.ru>
Mime-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-cvs-lib@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

On Sun, 23 Mar 1997, Warner Losh wrote:

> imp         97/03/23 22:15:08
> 
>   Modified:    lib/libc/nls  msgcat.c
>   Log:
>   Don't honor LANG or NLSPATH if we're setuid/setgid.
>   

1) You can't determine setuid/setgid without issetuid() syscall
implementing, so this change gives only false sense of security. 

2) Please back out LANG honoring, it is functionality degradation.

You can disable NLSPATH but only with issetuid() syscall, not now.

-- 
Andrey A. Chernov
<ache@null.net>
http://www.nagual.ru/~ache/