In message: <[email protected]>
            Dag-Erling Smørgrav <[email protected]> writes:
: Attilio Rao <[email protected]> writes:
: > Dag-Erling Smørgrav <[email protected]> writes:
: > > Perhaps the test in setusercontext() should be changed to use
: > > geteuid() instead of getuid().
: > Yes, I think that it probabilly makes more sense (geteuid() testing in
: > setusercontext()).
: 
: What if the user's ~/.login_conf sets a custom PATH, and the application
: switches back to root privs and fork()-exec()s some other program?

And we're back to the reason for why issetugid() :)

Warner
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/svn-src-all
To unsubscribe, send any mail to "[email protected]"

Reply via email to