Re: Thoughts on credential switching
From: One Thousand Gnomes
Date: Tue Apr 01 2014 - 16:23:40 EST
> Do we include credfd fds sitting in Unix sockets?
> Hmm. What if we had initial_creds and creds, and initial_creds never
> changed unless explicitly requested. There wouldn't be any way to
> revert to initial_creds, but may_ptrace would check initial_creds
> *and* creds. This is a little hacky, and it might break Android (I'm
> not really sure how the zygote thing works), but it could do the
That mirros setfsuid and seteuid type behaviour so seems sensible enough.
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/