Am 26.03.2013 22:57, schrieb Joachim Metz:
> usercustomize.py
>
> which contains:
> import os
> os.setuid(1000)
> [...]
> PYTHONPATH=. ./pyinstaller/pyinstaller.py

You basically did the same as you could do in shell-script:

uname=$(getent passwd 1000 | cut -d: -f1)
su $uname ./pyinstaller/pyinstaller.py


> Now, what happened to the "security measure" ?

PyInstaller is not running as root, since you changes the process uid to
1000 then PyInstaller is starting up.

-- 
Schönen Gruß
Hartmut Goebel
Dipl.-Informatiker (univ), CISSP, CSSLP

Goebel Consult
http://www.goebel-consult.de

Monatliche Kolumne:
http://www.cissp-gefluester.de/2011-11-in-troja-nichts-neues
Blog: http://www.goebel-consult.de/blog/20050620

Goebel Consult ist Mitglied bei http://www.7-it.de/

Attachment: smime.p7s
Description: S/MIME Kryptografische Unterschrift

Reply via email to