]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
SECURITY.
authorRuslan Ermilov <ru@FreeBSD.org>
Tue, 4 Sep 2001 16:15:51 +0000 (16:15 +0000)
committerRuslan Ermilov <ru@FreeBSD.org>
Tue, 4 Sep 2001 16:15:51 +0000 (16:15 +0000)
commit9dd887f1a6b4c4d3aa4d0c5d595436867d2200a0
tree5b951c59f980d8ae3d357a450261430a7153bb9b
parent7fd5ee41e3fc0035fa23ee3022cd53fa8cb0c53d
SECURITY.

Fixed macros for temporarily relinquishing and restoring setuid/setgid
privileges so that they never change the real user and group IDs of
the calling process.

The setre[ug]id() calls are still used in the REDUCE_PERM macro (with
the r[ug]id arguments of -1) so that the call changes the saved user
and group IDs of the process to that specified.

Also, the panic() and perr() functions had insufficient privileges to
delete the problematic file under /var/at.
usr.bin/at/panic.c
usr.bin/at/privs.h