wilber@alice.UUCP (07/11/88)
I wrote: >I have a program that is run suid to "foo", where foo != root. >It has code that looks like this: > > real_uid = getuid(); /* The effective user ID is still "foo". */ > . > . > setuid(uid); /* Now the real and effective user IDs are both real_uid. */ Of course that last line should be setuid(real_uid); /* Now the real and effective user IDs are both real_uid. */ (And no, that doesn't fix the problem -- only my description of the bug was in error, the bug is really there.) Bob Wilber Work: UUCP: {allegra, mtune, ihnp4}!gauss!wilber ARPA: wilber@research.att.com