On 31 Aug 2019, at 12:33, Ronny Bangsund 
<ronny.bangs...@gmail.com<mailto:ronny.bangs...@gmail.com>> wrote:

Digging through my vast mess of code, I found this function which sets the real 
and effective user (Setreuid) of the calling process:
func DegradeToUser(uname string) error {

Doesn't this suffer from the issue of only affecting the current thread on 
Linux, and hence not being safe to use from Go?

(https://github.com/golang/go/issues/1435)

Setting the uid/gid as part of starting a child process should be safe though 
(https://golang.org/pkg/syscall/#Credential).

//jb

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/golang-nuts/2B7ECBB8-89AE-48ED-AB08-9DB94902B050%40kastelo.net.

Reply via email to