If rather than setuid, a root process calls
setgroups(1000)
setresgid(1000, 1000, 1000)
setresuid(1000, 1000, 1000)

Is there anything to worry about in regard to the caveat in execve(2)?

"If a program is setuid to a non-superuser, but is executed when the real uid is
"root", then the process has some of the powers of a superuser as well."

Thanks, Kc

Reply via email to