On Wed, Feb 05, 2003 at 02:59:15PM -0800, Terry Lambert wrote:
> Terry Lambert wrote:
> > We need to know how we think it's supposed to work, not how you
> > think it's supposed to work to determine if the error is in the
> > code OR in the fact some old bug was fixed going from 4.7->5.0,
> > and the fix is biting you, OR it's a real bug.
> 
> For anyone who cares:
> 
> Additional information was provided off-list.  The problem was
> indeed that "setuid(geteuid());" was missing from the program.
> 
> Apparently, there was a bug fixed in 4.7 -> 5.0, where the
> effective UID was being tested instead of the real UID.
> 
> This is probably something that someone should MFC.

Really?  I just took a quick look at this, but I have to shove off
for now.  In initial tests, I get the different results depending on
whether I'm using static or dynamic linking.  But maybe it's me, I'll
look more carefully later.

How about pointing out the bug you found?

Cheers,
-- 
Jacques A. Vidrine <[EMAIL PROTECTED]>          http://www.celabo.org/
NTT/Verio SME          .     FreeBSD UNIX     .       Heimdal Kerberos
[EMAIL PROTECTED]     .  [EMAIL PROTECTED]  .          [EMAIL PROTECTED]

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message

Reply via email to