Excerpts from Brandon S Allbery KF8NH's message of Sat Dec 04 13:42:48 -0500 
2010:
> We went over this some time back; the GHC runtime is wrong here, it should
> only disable flags when running with geteuid() == 0.  Also, the current
> mechanism for specifying runtime flags at compile time is horridly ugly and
> this really needs to be fixed before any such runtime limitation is viable.
>  I hope that will be fixed in a later point release.

There are many setuid binaries to non-root users, so getuid() != geteuid()
would probably make more sense, though I'm not 100% it has all the correct
security properties.

Edward

_______________________________________________
Haskell-Cafe mailing list
Haskell-Cafe@haskell.org
http://www.haskell.org/mailman/listinfo/haskell-cafe

Reply via email to