Date: Mon, 24 Mar 1997 16:26:06 +0300 (MSK) From: =?KOI8-R?B?4c7E0sXKIP7F0s7P1w==?= <ache@nagual.ru> To: Warner Losh <imp@freefall.freebsd.org> Cc: CVS-committers@freefall.freebsd.org, cvs-all@freefall.freebsd.org, cvs-lib@freefall.freebsd.org Subject: Re: cvs commit: src/lib/libc/nls msgcat.c Message-ID: <Pine.BSF.3.95q.970324162314.660C-100000@nagual.ru> In-Reply-To: <199703240615.WAA01092@freefall.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, 23 Mar 1997, Warner Losh wrote: > imp 97/03/23 22:15:08 > > Modified: lib/libc/nls msgcat.c > Log: > Don't honor LANG or NLSPATH if we're setuid/setgid. > 1) You can't determine setuid/setgid without issetuid() syscall implementing, so this change gives only false sense of security. 2) Please back out LANG honoring, it is functionality degradation. You can disable NLSPATH but only with issetuid() syscall, not now. -- Andrey A. Chernov <ache@null.net> http://www.nagual.ru/~ache/
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.95q.970324162314.660C-100000>