On Wed, 2013-10-16 at 00:28 +0200, Samuel Thibault wrote: > Svante Signell, le Tue 15 Oct 2013 10:33:12 +0200, a écrit : > > + pids = __getpid(); > > + euids = __geteuid(); > > + auids = __getuid(); > > + egids = __getegid(); > > + agids = __getgid(); > > Err, which part of the protocol which check that these are actually the > proper value? What prevents a process from lying its *uid and *gid > values? That is part of what SCM_CREDS is supposed to provide.
checked by the check_auth() call, is that wrong?
