[X2Go-Dev] setuid/setgid in libXcomp

[Mike Gabriel]

Hi Orion,

On Do 25 Jul 2013 22:30:52 CEST Orion Poplawski wrote:

> On 07/14/2013 03:33 AM, Moritz Strübe wrote:
>> Hey,
>>
>> this is a bit of guesswork, but,
>> * getgit get the _real_ real gid
>> * setgit sets the _effective_ gid
>> Thus you reset the effective s/gid.
>>
>> Morty

> But why does it need to call this?  Isn't everything running as the  
> user already?
>

Everything in NX runs under the user who launches the X2Go session.  
IMHO resetting the effective GID prevents us from setgid file  
permission manipulations, so that the effective group ID always is the  
primary/real group ID of the current user that is executing the NX  
binary.

Greets,
Mike


-- 

DAS-NETZWERKTEAM
mike gabriel, herweg 7, 24357 fleckeby
fon: +49 (1520) 1976 148

GnuPG Key ID 0x25771B31
mail: mike.gabriel at das-netzwerkteam.de, http://das-netzwerkteam.de

freeBusy:
https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 836 bytes
Desc: Digitale PGP-Unterschrift
URL: <http://lists.x2go.org/pipermail/x2go-dev/attachments/20130725/55cfc940/attachment.pgp>