Bug#543589: setregid

2009-08-25 Thread Steve Langasek
On Tue, Aug 25, 2009 at 08:31:44PM -0400, Michael Spang wrote: > On Tue, Aug 25, 2009 at 8:11 PM, Steve Langasek wrote: > > On Tue, Aug 25, 2009 at 07:37:22PM -0400, Michael Spang wrote: > >> It seems you'd need to call setregid(getgid(), getgid()) to fully > >> drop privileges. When using setgid()

Bug#543589: setregid

2009-08-25 Thread Michael Spang
On Tue, Aug 25, 2009 at 8:11 PM, Steve Langasek wrote: > On Tue, Aug 25, 2009 at 07:37:22PM -0400, Michael Spang wrote: >> It seems you'd need to call setregid(getgid(), getgid()) to fully >> drop privileges. When using setgid() the set-group-id is not set. > > The current use of setuid() has the s

Bug#543589: setregid

2009-08-25 Thread Steve Langasek
On Tue, Aug 25, 2009 at 07:37:22PM -0400, Michael Spang wrote: > It seems you'd need to call setregid(getgid(), getgid()) to fully > drop privileges. When using setgid() the set-group-id is not set. The current use of setuid() has the same limitation. -- Steve Langasek Give me

Bug#543589: setregid

2009-08-25 Thread Michael Spang
It seems you'd need to call setregid(getgid(), getgid()) to fully drop privileges. When using setgid() the set-group-id is not set. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org