Date: Thu, 10 May 2001 15:12:41 +0300 From: Ruslan Ermilov <ru@FreeBSD.ORG> To: Bruce Evans <bde@zeta.org.au> Cc: Kris Kennaway <kris@obsecurity.org>, audit@FreeBSD.ORG Subject: Re: ping6 fixes Message-ID: <20010510151241.A44027@sunbay.com> In-Reply-To: <Pine.BSF.4.21.0105102044460.1933-100000@besplex.bde.org>; from bde@zeta.org.au on Thu, May 10, 2001 at 08:52:50PM %2B1000 References: <20010510124858.D19855@sunbay.com> <Pine.BSF.4.21.0105102044460.1933-100000@besplex.bde.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, May 10, 2001 at 08:52:50PM +1000, Bruce Evans wrote: > On Thu, 10 May 2001, Ruslan Ermilov wrote: > > > On Wed, May 09, 2001 at 08:37:40PM -0700, Kris Kennaway wrote: > > > On Wed, May 09, 2001 at 04:20:44AM +1000, Bruce Evans wrote: > > > > > > > I think I now understand the purpose of seteuid() before seteuid(). > > > > > > Me too. Thanks, all. > > > > > /me still doesn't. > > > > As I said, this would only be meaningful if: > > > > 1) we follow POSIX.1-200x > > I'm stll not sure about this (haven't seen POSIX.any-200x...). > Don't you know that the drafts are available on www.opengroup.com/austin-l ? > > - and - > > > > 2) the process doesn't have "appropriate privilege" initially, > > i.e., it's not setuid root (not the case here). > > It saves you from having to know much about the current ids. (Not a > good reason, since you really should understand the current ids in > set*id programs. And you really should check that set*id() succeeded...) > But the comment in the code assumes that the current IDs are that of root. Cheers, -- Ruslan Ermilov Oracle Developer/DBA, ru@sunbay.com Sunbay Software AG, ru@FreeBSD.org FreeBSD committer, +380.652.512.251 Simferopol, Ukraine http://www.FreeBSD.org The Power To Serve http://www.oracle.com Enabling The Information Age To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-audit" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010510151241.A44027>