Date: Tue, 08 Apr 2008 01:03:02 +0530 From: wahjava.ml@gmail.com (Ashish Shukla =?utf-8?B?4KSG4KS24KWA4KS3IA==?= =?utf-8?B?4KS24KWB4KSV4KWN4KSy?=) To: Joe Marcus Clarke <marcus@marcuscom.com> Cc: gnome@freebsd.org, FreeBSD Ports Mailing List <ports@freebsd.org>, Andrew Reilly <areilly@bigpond.net.au> Subject: Re: x11/gnome-screensaver-2.22.1 is not unlocking screen on entry of correct password. Message-ID: <87ej9h5ukx.fsf@chateau.d.lf> In-Reply-To: <1207583712.80953.7.camel@shumai.marcuscom.com> (Joe Marcus Clarke's message of "Mon, 07 Apr 2008 11:55:12 -0400") References: <87d4p3xome.fsf@chateau.d.lf> <1207495285.21780.1.camel@shumai.marcuscom.com> <87y77qg9zd.fsf@chateau.d.lf> <1207504273.22879.4.camel@shumai.marcuscom.com> <20080407063651.GB97699@duncan.reilly.home> <20080407070744.GA27115@duncan.reilly.home> <1207583712.80953.7.camel@shumai.marcuscom.com>
next in thread | previous in thread | raw e-mail | index | archive | help
--=-=-=
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
>>>>> "Joe" =3D=3D Joe Marcus Clarke <marcus@marcuscom.com> writes:
[snipped]
Joe> The setuid privileges are dropped once initialization is done sinc=
e GTK+
Joe> apps cannot run set[ug]id. If they could, or if gnome-screesaver-=
dialog
Joe> was not a GTK+ app, this wouldn't be a problem.
Thanks for the explanation, but I've a little doubt here, I saw
implementation of gtk_init_with_args()[1]. So I also noticed that it
checks for calling process to be set{uid,gid} and terminates if it is.
So, even if application drops superuser privileges before
gtk_init_with_args(), then how is it be able to access
/etc/passwd.master ?
References:
[1] - http://svn.gnome.org/viewvc/gtk%2B/trunk/gtk/gtkmain.c?revision=3D194=
81&view=3Dmarkup
TIA
=2D-=20
Ashish Shukla =E0=A4=86=E0=A4=B6=E0=A5=80=E0=A4=B7 =E0=A4=B6=E0=A5=81=E0=A4=
=95=E0=A5=8D=E0=A4=B2 http://wahjava.wordpress.com/
=C2=B7-- =C2=B7- =C2=B7=C2=B7=C2=B7=C2=B7 =C2=B7--- =C2=B7- =C2=B7=C2=B7=C2=
=B7- =C2=B7- =C2=B7--=C2=B7-=C2=B7 --=C2=B7 -- =C2=B7- =C2=B7=C2=B7 =C2=B7-=
=C2=B7=C2=B7 =C2=B7-=C2=B7-=C2=B7- -=C2=B7-=C2=B7 --- --
--=-=-=
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFH+nbzHy+EEHYuXnQRAlXsAJ9/5CRYr7wvn5I0SAxwNsHxnH8FGACfWc6i
nHRPjk5AmWZ5hNEPG7sU7vM=
=KJx+
-----END PGP SIGNATURE-----
--=-=-=--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?87ej9h5ukx.fsf>