https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=215202

Jilles Tjoelker <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[email protected]

--- Comment #2 from Jilles Tjoelker <[email protected]> ---
The pid in LOCAL_PEERCRED is not a security feature but only a feature to
enforce that a proper security feature can be added later. This is because
there is nothing to enforce that the pid refers to the same process or that it
has not executed some other binary; also, applications are not isolated in a
way that makes different Wayland privileges useful for security.

Adding pid to struct ucred seems wrong since it is shared between processes
that do not change their credentials. This would make more sense as a property
of the socket. The pid would then be the pid of the process that called
listen() or connect().

-- 
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
[email protected] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-bugs
To unsubscribe, send any mail to "[email protected]"

Reply via email to