From owner-cvs-src@FreeBSD.ORG  Thu Jul 15 20:40:00 2004
Return-Path: <owner-cvs-src@FreeBSD.ORG>
Delivered-To: cvs-src@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 1D71316A4CE; Thu, 15 Jul 2004 20:40:00 +0000 (GMT)
Received: from fledge.watson.org (fledge.watson.org [204.156.12.50])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id C275243D48; Thu, 15 Jul 2004 20:39:59 +0000 (GMT)
	(envelope-from robert@fledge.watson.org)
Received: from fledge.watson.org (localhost [127.0.0.1])
	by fledge.watson.org (8.12.11/8.12.11) with ESMTP id i6FKddNb028343;
	Thu, 15 Jul 2004 16:39:39 -0400 (EDT)
	(envelope-from robert@fledge.watson.org)
Received: from localhost (robert@localhost)i6FKddBu028340;
	Thu, 15 Jul 2004 16:39:39 -0400 (EDT)
	(envelope-from robert@fledge.watson.org)
Date: Thu, 15 Jul 2004 16:39:39 -0400 (EDT)
From: Robert Watson <rwatson@FreeBSD.org>
X-Sender: robert@fledge.watson.org
To: Pawel Jakub Dawidek <pjd@FreeBSD.org>
In-Reply-To: <20040715173524.GG12007@darkness.comp.waw.pl>
Message-ID: <Pine.NEB.3.96L.1040715163859.67360E-100000@fledge.watson.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
cc: cvs-src@FreeBSD.org
cc: src-committers@FreeBSD.org
cc: "Christian S.J. Peron" <csjp@FreeBSD.org>
cc: cvs-all@FreeBSD.org
Subject: Re: cvs commit: src/sys/kern kern_descrip.c
X-BeenThere: cvs-src@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: CVS commit messages for the src tree <cvs-src.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src>,
	<mailto:cvs-src-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-src>
List-Post: <mailto:cvs-src@freebsd.org>
List-Help: <mailto:cvs-src-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src>,
	<mailto:cvs-src-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 15 Jul 2004 20:40:00 -0000


On Thu, 15 Jul 2004, Pawel Jakub Dawidek wrote:

> Thanks for clarification, but why actually do we care so much here about
> real uid? 

Because many resource limits are relative to the real uid, not the
effective uid.  In particular, to prevent things like setuid apps (lpr,
etc) from gaining the resources of root, and run instead with the
resources of the user who ran the app.

Robert N M Watson             FreeBSD Core Team, TrustedBSD Projects
robert@fledge.watson.org      Principal Research Scientist, McAfee Research