This is the mail archive of the
libc-hacker@cygnus.com
mailing list for the glibc project.
Re: pt_chown
- To: Zack Weinberg <zack@rabi.columbia.edu>
- Subject: Re: pt_chown
- From: Ulrich Drepper <drepper@cygnus.com>
- Date: 30 Mar 1999 18:41:40 -0800
- Cc: Geoff Keating <geoffk@ozemail.com.au>, libc-hacker@cygnus.com
- References: <199903310206.VAA19699@blastula.phys.columbia.edu>
- Reply-To: drepper@cygnus.com (Ulrich Drepper)
Zack Weinberg <zack@rabi.columbia.edu> writes:
> That said, here's a patch that makes pt_chown drop privileges before
> calling argp or gettext; normal execution doesn't need either. It
> also fixes the real security problem reported in the PR (race due to
> closing the master pty).
The patch looks fine to me, thanks.
> - Do we have user side support for the capability stuff in 2.[12] yet?
No. I've tried to convince the kernel people that we have to have a
library soon but they don't want to commit themself to an fixed API
yet and therefore were not in support of it.
--
---------------. drepper at gnu.org ,-. 1325 Chesapeake Terrace
Ulrich Drepper \ ,-------------------' \ Sunnyvale, CA 94089 USA
Cygnus Solutions `--' drepper at cygnus.com `------------------------