Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 18 Jun 1997 16:31:36 +0930 (CST)
From:      Michael Smith <msmith@atrad.adelaide.edu.au>
To:        ada@not-enough.bandwidth.org (Ada T Lim)
Cc:        hackers@FreeBSD.ORG
Subject:   Re: hackers-digest V3 #242
Message-ID:  <199706180701.QAA20880@genesis.atrad.adelaide.edu.au>
In-Reply-To: <199706180623.QAA03038@polya.blah.org> from Ada T Lim at "Jun 18, 97 04:23:10 pm"

next in thread | previous in thread | raw e-mail | index | archive | help
Ada T Lim stands accused of saying:
>
> Anyhow, what would be a good way to implement 'setuid libraries'?
> (The idea being that all function calls to this library have an
> implicit setuid(0) first and a setuid() back afterwards.

This discards any state that may be implicit in the user's current
priviledge level though, so the library code would have to be paranoid
about checking the credentials it was being run with.  It's kinda sticky.

> Ada

-- 
]] Mike Smith, Software Engineer        msmith@gsoft.com.au             [[
]] Genesis Software                     genesis@gsoft.com.au            [[
]] High-speed data acquisition and      (GSM mobile)     0411-222-496   [[
]] realtime instrument control.         (ph)          +61-8-8267-3493   [[
]] Unix hardware collector.             "Where are your PEZ?" The Tick  [[



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199706180701.QAA20880>