>>>>> "Joe" == Joe Marcus Clarke <[EMAIL PROTECTED]> writes:
[snipped] Joe> The setuid privileges are dropped once initialization is done since GTK+ Joe> apps cannot run set[ug]id. If they could, or if gnome-screesaver-dialog Joe> was not a GTK+ app, this wouldn't be a problem. Thanks for the explanation, but I've a little doubt here, I saw implementation of gtk_init_with_args()[1]. So I also noticed that it checks for calling process to be set{uid,gid} and terminates if it is. So, even if application drops superuser privileges before gtk_init_with_args(), then how is it be able to access /etc/passwd.master ? References: [1] - http://svn.gnome.org/viewvc/gtk%2B/trunk/gtk/gtkmain.c?revision=19481&view=markup TIA -- Ashish Shukla आशीष शुक्ल http://wahjava.wordpress.com/ ·-- ·- ···· ·--- ·- ···- ·- ·--·-· --· -- ·- ·· ·-·· ·-·-·- -·-· --- --
pgp6cuS4CBPJK.pgp
Description: PGP signature