ruby-dev

まつもと ゆきひろです

In message "[ruby-dev:14688] Re: How to abondon saved uid privilege"
    on 01/09/05, Takahiro Kambe <taca@sky.yamashina.kyoto.jp> writes:

|これも参考に話を元に戻すと、永井さんが出されていたサンプルに違和感を感
|じていたのですが、BSD系(4.4BSD由来)では、
|
|setuid(id)		ruid, euid, saved uid全部idに変える。
|seteuid(id)		euidだけidに変える。
|setreuid(rid, eid)	ruidをridに、eidをeuidに変える。
|			ruidが変わった場合は、saved uidもeuidに変わる。
|			但し、-1をridやeuidに指定した場合は今のまま。
|
|ruid: real uid (実ユーザID)
|euid: effective uid (実効ユーザID)
|saved uid: setuidビット付きで実行された時点での実効ユーザID
|
|saved uidを含めて単純に権限を放棄したいなら、setuid(2)。
|ruidを変えずにeuidとsaved uidを変えたいなら、setreuid(2)。
|
|でいいのかな。おっと、setreuid(2)のHISTORYに、
|
|     The setreuid() function call appeared in 4.2BSD.  An incompatible version
|     was implemented in 4.4BSD.  It was reimplemented in NetBSD 1.2 in a way
|     compatible with 4.3BSD, SunOS and Linux, but should not be used in new
|     code.
|
|なんて記述がある!

あまり話についていけてるとは言えないのですが、要するに
setruid/seteuidを優先するべきということなんでしょうか？

Thread

Prev Next

In This Thread

Prev Next

[#14614] 大小文字を無視した比較で ' 帰 ' == ' 蟻 ' ? — "K.Umakoshi" <pegacorn@...>

[#14621] suidruby — nobu.nakada@...

[#14626] ARGV — WATANABE Hirofumi <eban@...>

[#14636] Re: [REQ] String#slice(re, n) — Minero Aoki <aamine@...>

[#14642] getnameinfo? — Masatoshi SEKI <m_seki@...>

[#14658] Socekt::SOL_TCP -> Socket::IPPROTO_TCP — m_seki@...

[#14662] How to abondon saved uid privilege — nobu.nakada@...

[#14668] = in conditional — "Akinori MUSHA" <knu@...>

[#14683] ruby 1.7 の eval.c で warning — Kazuhiro NISHIYAMA <zn@...>

[#14697] Forward: [ruby-talk:20735] bug in tk.rb? — matz@... (Yukihiro Matsumoto)

[#14698] Forward: [ruby-talk:20820] Ruby/Tk core dump — matz@... (Yukihiro Matsumoto)

[#14710] SEGV at digest.c — Tietew <tietew@...>

[#14712] extra puts() at digest.c — Tietew <tietew@...>

[#14716] CGI#header bug — Shugo Maeda <shugo@...>

[#14730] ruby-lex.rb: get value from TkSTRING and TkCOMMENT — TAKAHASHI Masayoshi <maki@...>

[#14741] Forward: [ruby-talk:20957] Re: Is Ruby/Tk being maintained? — matz@... (Yukihiro Matsumoto)

[#14742] Forward: [ruby-talk:20964] Re: Is Ruby/Tk being maintained? — matz@... (Yukihiro Matsumoto)

[#14743] [BUG] $_ on thread switching — nobu.nakada@...

[#14749] forwardable.rb : call Kernel.raise — Kenichi Komiya <kom@...1.accsnet.ne.jp>

[#14754] regex.c について — Osamu Shigematsu <shige@...>

[#14765] DISTCLEANFILES in mkmf.rb — nobu.nakada@...

[#14766] Enumerable#inject — OZAWA -Crouton- Sakuro <crouton@...>

[#14768] rational precision 対応 — keiju@... (Keiju ISHITSUKA)

[#14782] coredump in mod_ruby's configure.rb — "Akinori MUSHA" <knu@...>

[#14786] [PATCH] File.utime fails occasionally — nobu.nakada@...

[#14793] Array is not Comparable — "Akinori MUSHA" <knu@...>

[#14798] freeing thread stack etc. (Re: ruby 1.6.5 preview) — matz@... (Yukihiro Matsumoto)

[#14809] WAIT_SELECT value with multithread — nobu.nakada@...

[#14810] ruby1.6.5/marshal.c — "Shin'ya Adzumi" <adzumi@...>

[#14813] option -d differ with --debug — Koji Arai <JCA02266@...>

[#14816] Generator — "Akinori MUSHA" <knu@...>

[#14823] ruby-1.6.5 MacOS X 10.1 patch — SHIROYAMA Takayuki - <psi@...>

[#14824] mailread.rb — Tietew <tietew@...>

[ruby-dev:14691] Re: How to abondon saved uid privilege

Thread

In This Thread

[#14823] ruby-1.6.5 MacOS X 10.1 patch — SHIROYAMA Takayuki　- <psi@...>