From: "vihai (Daniele Orlandi)" <daniele@...>
Date: 2013-02-08T00:27:18+09:00
Subject: [ruby-core:51989] [ruby-trunk - Feature #6975] Changing UID/GID when calling spawn/popen


Issue #6975 has been updated by vihai (Daniele Orlandi).


Thank you very much!

However it would useful and recommendable if spawn could also initialize additional groups, either directly via setgroups(2) or via initgroups(3)

Do you agree?
Should I create a new feature request?
----------------------------------------
Feature #6975: Changing UID/GID when calling spawn/popen
https://bugs.ruby-lang.org/issues/6975#change-35997

Author: vihai (Daniele Orlandi)
Status: Closed
Priority: Normal
Assignee: akr (Akira Tanaka)
Category: core
Target version: 


Hello,

If I am not wrong it seems that there is no way to properly drop all privileges when spawning a process with spawn/popen.

AFAIK, proper privilege dropping should be done after the fork() and before the exec() and there doesn't seem to be such functionality neither an hook like Python has.

Thanks,
Bye,


-- 
http://bugs.ruby-lang.org/