Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 21 Apr 1995 11:49:42 -0400
From:      Garrett Wollman <wollman@halloran-eldar.lcs.mit.edu>
To:        erandall@muffit.reo.dec.com (Ed Randall)
Cc:        freebsd-security@FreeBSD.org
Subject:   Re: Call for remove setr[ug]id() and setre[ug]id() from libc
Message-ID:  <9504211549.AA06954@halloran-eldar.lcs.mit.edu>
In-Reply-To: <9504210746.AA22703@muffit.reo.dec.com>
References:  <tPZVfbladA@astral.msk.su> <9504210746.AA22703@muffit.reo.dec.com>

next in thread | previous in thread | raw e-mail | index | archive | help
<<On Fri, 21 Apr 95 8:46:57 WET DST, erandall@muffit.reo.dec.com (Ed Randall) said:

> Wouldn't it be better to FIX these functions to match the POSIX standard, and 
> patch up the security holes ? 

The POSIX standard specifies set[ug]id() AND NOTHING ELSE.  Do you
really want strict POSIX behavior?

I didn't think so...

-GAWollman

--
Garrett A. Wollman   | Shashish is simple, it's discreet, it's brief. ... 
wollman@lcs.mit.edu  | Shashish is the bonding of hearts in spite of distance.
Opinions not those of| It is a bond more powerful than absence.  We like people
MIT, LCS, ANA, or NSA| who like Shashish.  - Claude McKenzie + Florent Vollant



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?9504211549.AA06954>