Re: [PATCH] caching daemon release and nsswitch patches

From: Jilles Tjoelker <jilles_at_stack.nl>
Date: Wed, 31 Aug 2005 21:00:59 +0200
[cc list stripped]
On Tue, Aug 30, 2005 at 05:32:52PM +0400, Michael Bushkov wrote:
> We can't ensure that, I guess. In the upcoming version (before the 1st of 
> September), the cache would be per-user. This would solve all the security 
> problems. In a little while, I'll implement the ability for cached to act 
> as nscd. So you'll be able to choose the behaviour.

What about setuid/setgid programs then?

setuid root programs can use root's cache, perhaps a similar thing could
be done for other setuid programs, but what about setgid?

perhaps don't cache at all for set*id programs (issetugid(2))?

-- 
Jilles Tjoelker
Received on Wed Aug 31 2005 - 17:01:01 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:38:42 UTC