Dear Joep

Thanks for your reply. I have a clarification. Please read below.

>> Real UID        = 100
>> Effective UID   = 0
>> Real GID        = 1
>> Effective GID   = 0
>> calling issetugid()
>> issetugid returning = 1
>>
>> This shows that my euid (Effective Used Id) and ruid(Real Used Id) are 
>> different.
>> issetugid returns 1(true).
>> This also shows that the process is secure.

>No, it shows that the process is started as a set-uid or set-gid
>process. It says nothing about whether your process is secure or not.

I was seeing the Security Section of ld.so.1 at
link "http://bama.ua.edu/cgi-bin/man-cgi?ld.so.1+1"; and here it is written that

The runtime linker categorizes a process as  secure  if  the user  is  not  a 
super-user, and the real user and effective user identifiers are not equal. 

In our case we are running the application with user "pankaj" and real and 
effective user ids are 100 and 0. Also in Linkers and Loaders guide of 
opensolaris at link http://docs.sun.com/app/docs/doc/817-1984/6mhm7pl1i?a=view. 
On third line it is written that "The runtime linker categorizes a process as 
secure if the issetugid(2) system call returns true for the process". 

So we are thinking that our process is a secured process.

Please help us to solve this problem as soon as possible.

Regards

Vishwajeet Wadhwa
 
 
This message posted from opensolaris.org

Reply via email to