From owner-cvs-lib Mon Mar 24 07:29:00 1997 Return-Path: Received: (from root@localhost) by freefall.freebsd.org (8.8.5/8.8.5) id HAA13472 for cvs-lib-outgoing; Mon, 24 Mar 1997 07:29:00 -0800 (PST) Received: from rover.village.org (rover.village.org [204.144.255.49]) by freefall.freebsd.org (8.8.5/8.8.5) with SMTP id HAA13199; Mon, 24 Mar 1997 07:25:26 -0800 (PST) Received: from rover.village.org [127.0.0.1] by rover.village.org with esmtp (Exim 0.56 #1) id E0w9BWR-000576-00; Mon, 24 Mar 1997 08:18:55 -0700 To: =?KOI8-R?B?4c7E0sXKIP7F0s7P1w==?= Subject: Re: cvs commit: src/lib/libc/nls msgcat.c Cc: CVS-committers@freefall.freebsd.org, cvs-all@freefall.freebsd.org, cvs-lib@freefall.freebsd.org In-reply-to: Your message of "Mon, 24 Mar 1997 16:26:06 +0300." References: Date: Mon, 24 Mar 1997 08:18:55 -0700 From: Warner Losh Message-Id: Sender: owner-cvs-lib@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk In message =?KOI8-R?B?4c7E0sXKIP7F0s7P1w==?= writes: : 1) You can't determine setuid/setgid without issetuid() syscall : implementing, so this change gives only false sense of security. I know that. It is better than nothing, which is what we have. There is a XXX Really needs isetugid() comment there so we can easily find all the places we've plastered over. : 2) Please back out LANG honoring, it is functionality degradation. OK. I'll do that, but I'll make it safe. : You can disable NLSPATH but only with issetuid() syscall, not now. Then someone should check it in. I'm tired of waiting :-). I'd do it, but I'm sure that my implementation would be busted (which would be basically if euid != uid || egid != gid || P_SETUID). Warner