On 2019-07-27, Mattias Andrée <[email protected]> wrote: > A file is executable only if the effective user > have permission to execute it. The real user's > permissions do not matter.
Thanks for the patch, but doesn't this only make a difference if the `which` binary itself is setuid? If not, can you provide an example that is fixed by this patch? I looked at a few other implementations and they just use access(3), which behaves like faccessat(3) with no flags.
