Date: Mon, 24 Mar 1997 08:18:55 -0700 From: Warner Losh <imp@village.org> To: =?KOI8-R?B?4c7E0sXKIP7F0s7P1w==?= <ache@nagual.ru> Cc: CVS-committers@freefall.freebsd.org, cvs-all@freefall.freebsd.org, cvs-lib@freefall.freebsd.org Subject: Re: cvs commit: src/lib/libc/nls msgcat.c Message-ID: <E0w9BWR-000576-00@rover.village.org> In-Reply-To: Your message of "Mon, 24 Mar 1997 16:26:06 %2B0300." <Pine.BSF.3.95q.970324162314.660C-100000@nagual.ru> References: <Pine.BSF.3.95q.970324162314.660C-100000@nagual.ru>
next in thread | previous in thread | raw e-mail | index | archive | help
In message <Pine.BSF.3.95q.970324162314.660C-100000@nagual.ru> =?KOI8-R?B?4c7E0sXKIP7F0s7P1w==?= writes: : 1) You can't determine setuid/setgid without issetuid() syscall : implementing, so this change gives only false sense of security. I know that. It is better than nothing, which is what we have. There is a XXX Really needs isetugid() comment there so we can easily find all the places we've plastered over. : 2) Please back out LANG honoring, it is functionality degradation. OK. I'll do that, but I'll make it safe. : You can disable NLSPATH but only with issetuid() syscall, not now. Then someone should check it in. I'm tired of waiting :-). I'd do it, but I'm sure that my implementation would be busted (which would be basically if euid != uid || egid != gid || P_SETUID). Warner
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?E0w9BWR-000576-00>