* Justin Pryzby 

| I don't suppose md5sums are available?  Does the file change
| sufficiently often such that its not reasonable to hardcode an MD5?

It doesn't change, and I have the hashes, so that might be a workable
approach.

| Ah, maybe this bug is moot anyway.  I seem to recall a thread on LKML
| (or was it a debian bug log?) where it was pointed out that there is
| no way to drop privileges in such a way that you can't get them back
| with seteuid(getsuid()).  In which case, this bug lies in your hands,
| since I can't think of a clean way to have it run as a user which
| cannot regain privileges.

setuid(2) seems to disagree with you (for suid root, and we wouldn't
be suid, we would be run by root).

-- 
Tollef Fog Heen                                                        ,''`.
UNIX is user friendly, it's just picky about who its friends are      : :' :
                                                                      `. `' 
                                                                        `-  


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to