Re: setuid confusion

Top Page
Attachments:
Message as email
+ (text/plain)
Delete this message
Reply to this message
Author: Alex LeDonne
Date:  
To: Main PLUG discussion list
Subject: Re: setuid confusion
I just found a snippet on
http://www.linux-knowledge-portal.org/en/content.php?&content/programming/secprog2.html
:

"The access(2) call uses the real UID and real GID to check the
rights. This means that the effective UID/GID of SetUID/-GID programs
does not apply. In the case of the access check with open(2), on the
other hand, the effective UID/GID is used."

So if svn is using access(2) instead of open(2) to check perms on the
lock file, your system() call won't work.

I haven't tried to look at subversion source yet to see...

-Alex L
---------------------------------------------------
PLUG-discuss mailing list -
To subscribe, unsubscribe, or to change your mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss