Messages in this thread | | | Date | Mon, 21 Aug 2006 04:45:37 +0400 | From | Solar Designer <> | Subject | Re: [PATCH] set*uid() must not fail-and-return on OOM/rlimits |
| |
On Mon, Aug 21, 2006 at 10:23:35AM +1000, Peter Williams wrote: > How about going ahead with the uid change (if the current user is root) > BUT still return -EAGAIN. That way programs that ignore the return > value will at least no longer have root privileges.
That's bad. It will break legitimate programs that assume that the UID switch has failed if set*uid() indicates so with its return value.
Alexander - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |