This is the mail archive of the
cygwin@cygwin.com
mailing list for the Cygwin project.
Re: The cygwin Server Daemon
On Tue, Apr 23, 2002 at 08:51:24AM -0700, Richard Troy wrote:
>Here's what I envision at this point: _execve() code notices the
>suid/guid bits are set, checks that the file owner is not the caller
>and that the callers group list does not include the files group id,
>and dispatches a message to cygserver. That message includes the path
>to the image - and does not include the owner.group as a secondary
>guard to security at the cost of having to fetch this information a
>second time.
Just a minor nudge, but the code to look at is undoubtedly in spawn.cc,
specifically the spawn_guts function. The exec calls are all wrappers
for that function.
cgf
--
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
Bug reporting: http://cygwin.com/bugs.html
Documentation: http://cygwin.com/docs.html
FAQ: http://cygwin.com/faq/