[X2go-Dev] x2goserver package with setuidwrapper

[Moritz Struebe]

On 2011-07-18 19:45, Mike Gabriel wrote:
>
> What about the real user vs. effective check in the
> x2gosqlitewrapper.pl script. The setgid bit does not change the
> effective user, only the effective group. Is there a similarly easy
> check for that in Perl? 

No, no need for that. I also had a longer discussion with Reinhard about
that. IMO that is a sanity not a security check. At least on a correctly
configured system. ;)

Cheers
Morty

-- 
Dipl.-Ing. Moritz 'Morty' Struebe (Wissenschaftlicher Mitarbeiter)
Lehrstuhl für Informatik 4 (Verteilte Systeme und Betriebssysteme)
Friedrich-Alexander-Universität Erlangen-Nürnberg
Martensstr. 1
91058 Erlangen

Tel   : +49 9131 85-25419
Fax   : +49 9131 85-28732
eMail : struebe at informatik.uni-erlangen.de
WWW   : http://www4.informatik.uni-erlangen.de/~morty




-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4482 bytes
Desc: S/MIME Kryptografische Unterschrift
URL: <http://lists.x2go.org/pipermail/x2go-dev/attachments/20110719/e9111717/attachment.bin>