Hmm...  From what I gather from the whitepaper they recommend setresuid()
for systems with it (linux) and setreuid() for those without.. I used
seteuid() + setuid() which I _believe_ does the same thing as setreuid()..
 Of course I could be totally wrong....  any thoughts?

Martin Pool said:
> Onlooker 20 Nov 2002, Dwayne Rightler <[EMAIL PROTECTED]>
> wrote:
>> Here is a small patch I wrote so you can start distccd with
>> user/group.
>
> Thankyou for the patch.
>
> I think as written this is not secure, because on some platforms it will
> leave the process with some root privileges.  I might be wrong, but it
> needs to be checked again the "Setuid Demystified" whitepaper.
>
> Once somebody (you/me/somebody else) checks that and writes a test case
> I am happy to merge it.
>
> --
> Martin



_______________________________________________
distcc mailing list
[EMAIL PROTECTED]
http://lists.samba.org/cgi-bin/mailman/listinfo/distcc

Reply via email to