On 2011-07-18 19:45, Mike Gabriel wrote:
What about the real user vs. effective check in the x2gosqlitewrapper.pl script. The setgid bit does not change the effective user, only the effective group. Is there a similarly easy check for that in Perl?
No, no need for that. I also had a longer discussion with Reinhard about that. IMO that is a sanity not a security check. At least on a correctly configured system. ;)
Cheers Morty
-- Dipl.-Ing. Moritz 'Morty' Struebe (Wissenschaftlicher Mitarbeiter) Lehrstuhl für Informatik 4 (Verteilte Systeme und Betriebssysteme) Friedrich-Alexander-Universität Erlangen-Nürnberg Martensstr. 1 91058 Erlangen
Tel : +49 9131 85-25419 Fax : +49 9131 85-28732 eMail : struebe@informatik.uni-erlangen.de WWW : http://www4.informatik.uni-erlangen.de/~morty