Re: Thoughts on credential switching

From: One Thousand Gnomes
Date: Tue Apr 01 2014 - 16:23:40 EST

> Do we include credfd fds sitting in Unix sockets?


> Hmm. What if we had initial_creds and creds, and initial_creds never
> changed unless explicitly requested. There wouldn't be any way to
> revert to initial_creds, but may_ptrace would check initial_creds
> *and* creds. This is a little hacky, and it might break Android (I'm
> not really sure how the zygote thing works), but it could do the
> trick.

That mirros setfsuid and seteuid type behaviour so seems sensible enough.
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at
Please read the FAQ at