On Fri, Jul 17, 2009 at 04:59:53PM -0400, Jean-Paul Calderone wrote: > On Fri, 17 Jul 2009 15:01:41 -0500, travis+ml-pyt...@subspacefield.org wrote: >> I am suggesting that the setresuid function be added to python, >> perhaps in the OS module, because it has the clearest semantics for >> manipulating user ids. The reason why is best described in the >> following paper: > > Yes, it'd be good for Python to expose setresuid. The best course of > action is to file a ticket in the issue tracker. Things will be sped > along if you also attach a patch implementing the change. :)
I'm now working on this as issue6758 in the tracker. Adding the calls to the os module doesn't seem like a good idea to me, because the calls are not POSIX, and it appears that os maps to posixmodule.c. Since the authors of the paper (Wagner et. al.) are proposing a new set of APIs to make all of this clearer, I'm thinking that I will create a module specifically for dropping permissions. -- Obama Nation | My emails do not have attachments; it's a digital signature that your mail program doesn't understand. | http://www.subspacefield.org/~travis/ If you are a spammer, please email j...@subspacefield.org to get blacklisted.
pgpty4aw4PVv5.pgp
Description: PGP signature
-- http://mail.python.org/mailman/listinfo/python-list
