From: Juliusz Chroboczek <[EMAIL PROTECTED]>
Subject: Re: Some patches to luit
Date: 14 Mar 2003 22:50:35 +0100

> IT> After setuid, the effective UID changes to tom, resulting in all
> IT> the three UIDs equal to the real UID.
> 
> No, suid is still daemon.  Fork, exec(/bin/sh), and the user can
> setuid(daemon).

I see.  Thanks for explanation.

Anyway, I do not think setuid'ing luit to non-root is useful, and I do
not think disabling it does any harm.

I thought as I wrote in the previous mail because I was looking at
intro(2) manpage on Solaris, which said:
|   Saved User ID and Saved Group ID
|      The saved user ID and saved group ID are the values  of  the
|      effective user ID and effective group ID prior to an exec of
                                                ~~~~~~~~
|      a file whose set user or set group file mode  bit  has  been
|      set (see exec(2)).
This is different from the manpage on SUSv4, and I wonder what POSIX
is after all.... :)

Best regards,
Tsuyoshi

---   ITO Tsuyoshi  <[EMAIL PROTECTED]>   ---
--- Dept. of Computer Science, University of Tokyo. ---
_______________________________________________
Devel mailing list
[EMAIL PROTECTED]
http://XFree86.Org/mailman/listinfo/devel

Reply via email to