On Fri, Jul 17, 2009 at 04:59:53PM -0400, Jean-Paul Calderone wrote:
> On Fri, 17 Jul 2009 15:01:41 -0500, travis+ml-pyt...@subspacefield.org wrote:
>> I am suggesting that the setresuid function be added to python,
>> perhaps in the OS module, because it has the clearest semantics for
>> manipulating user ids.  The reason why is best described in the
>> following paper:
>
> Yes, it'd be good for Python to expose setresuid.  The best course of
> action is to file a ticket in the issue tracker.  Things will be sped
> along if you also attach a patch implementing the change. :)

I'm now working on this as issue6758 in the tracker.

Adding the calls to the os module doesn't seem like a good idea to me,
because the calls are not POSIX, and it appears that os maps to
posixmodule.c.

Since the authors of the paper (Wagner et. al.) are proposing a new
set of APIs to make all of this clearer, I'm thinking that I will
create a module specifically for dropping permissions.
-- 
Obama Nation | My emails do not have attachments; it's a digital signature
that your mail program doesn't understand. | 
http://www.subspacefield.org/~travis/ 
If you are a spammer, please email j...@subspacefield.org to get blacklisted.

Attachment: pgpty4aw4PVv5.pgp
Description: PGP signature

-- 
http://mail.python.org/mailman/listinfo/python-list

Reply via email to