From: "nobu (Nobuyoshi Nakada)" <nobu@...>
Date: 2012-09-04T16:39:21+09:00
Subject: [ruby-core:47416] [ruby-trunk - Feature #6975] Changing UID/GID when calling spawn/popen


Issue #6975 has been updated by nobu (Nobuyoshi Nakada).

Description updated
Category set to core
Assignee set to akira (akira yamada)

Here is a patch
  https://github.com/nobu/ruby/compare/uid-gid_exec_options

But I have no ideas how to test this feature.
----------------------------------------
Feature #6975: Changing UID/GID when calling spawn/popen
https://bugs.ruby-lang.org/issues/6975#change-29169

Author: vihai (Daniele Orlandi)
Status: Open
Priority: Normal
Assignee: akira (akira yamada)
Category: core
Target version: 


Hello,

If I am not wrong it seems that there is no way to properly drop all privileges when spawning a process with spawn/popen.

AFAIK, proper privilege dropping should be done after the fork() and before the exec() and there doesn't seem to be such functionality neither an hook like Python has.

Thanks,
Bye,


-- 
http://bugs.ruby-lang.org/