>>>>> "Joe" == Joe Marcus Clarke <[EMAIL PROTECTED]> writes:

[snipped]

    Joe> The setuid privileges are dropped once initialization is done since 
GTK+
    Joe> apps cannot run set[ug]id.  If they could, or if 
gnome-screesaver-dialog
    Joe> was not a GTK+ app, this wouldn't be a problem.

Thanks for the explanation, but I've a little doubt here, I saw
implementation of gtk_init_with_args()[1]. So I also noticed that it
checks for calling process to be set{uid,gid} and terminates if it is.

So, even if application drops superuser privileges before
gtk_init_with_args(), then how is it be able to access
/etc/passwd.master ?

References:
[1] - 
http://svn.gnome.org/viewvc/gtk%2B/trunk/gtk/gtkmain.c?revision=19481&view=markup

TIA
-- 
Ashish Shukla आशीष शुक्ल                      http://wahjava.wordpress.com/
·-- ·- ···· ·--- ·- ···- ·- ·--·-· --· -- ·- ·· ·-·· ·-·-·- -·-· --- --

Attachment: pgp6cuS4CBPJK.pgp
Description: PGP signature

Reply via email to