https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=260160

--- Comment #10 from Martin Matuska <[email protected]> ---
I have the following comment from Mateusz Guzik <[email protected]> oh this
patch:

On 29. 3. 2022 17:53, Mateusz Guzik wrote:
> whoa, stop right there.
>
> The commit at hand introduces a security problem by modifying proc
> credentials. Another thread in the same process can race to snatch
> these creds permanently for itself.
>
> The patch is definitely wrong. 

I don't want to open a security hole, we need a new fix for this.

-- 
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to