From: Alan Cox <[EMAIL PROTECTED]> > Julie wrote: > > There's a difference between "Oops, we made a mistake" and "No, > > we really are following the standard." The Linux threading model > > violates the standard. So the correct answer is "Oops, we made a > > mistake." > > The mistake is the standard. Linux is not required to follow historical > accidents. When you wish to emulate a broken standard you do it in a way that > does not harm the sane.
That's a pretty bold statement. > In this case that means shared suid emulation is a glibc problem. Would someone care to explain the security policy as it relates to saved set-IDs if the saved set-ID values are emulated in the library? -- Julie.
