Messages in this thread | | | Date | Tue, 1 Apr 2014 21:22:35 +0100 | From | One Thousand Gnomes <> | Subject | Re: Thoughts on credential switching |
| |
> Do we include credfd fds sitting in Unix sockets?
Ouch
> Hmm. What if we had initial_creds and creds, and initial_creds never > changed unless explicitly requested. There wouldn't be any way to > revert to initial_creds, but may_ptrace would check initial_creds > *and* creds. This is a little hacky, and it might break Android (I'm > not really sure how the zygote thing works), but it could do the > trick.
That mirros setfsuid and seteuid type behaviour so seems sensible enough.
| |