Re: [hackers] [slock] [PATCH] Properly drop privileges

From: FRIGN <dev_AT_frign.de>
Date: Wed, 7 Sep 2016 17:17:19 +0200

On Wed, 7 Sep 2016 15:25:56 +0200
FRIGN <dev_AT_frign.de> wrote:

>

Quentin found a problem on OpenBSD which was due to the negligient use
of the passwd struct pointer. Given it points to static memory, we
ended up with a "different" struct when we went to se the privilege
drop. To fix this, we store the uid and gid directly after the sanity
check of the user and group names.

-- 
FRIGN <dev_AT_frign.de>
Received on Wed Sep 07 2016 - 17:17:19 CEST

This archive was generated by hypermail 2.3.0 : Wed Sep 07 2016 - 17:24:18 CEST