Re: setreuid(2)?

2022-11-09 Thread Robert Elz
Date:Wed, 9 Nov 2022 07:57:47 + (UTC) From:RVP Message-ID: <76af8c1a-297c-81dc-8b50-4df6b985d...@sdf.org> | I don't use seteuid(), but, it looks like you can just re-swap the | (uid, euid) in a child binary and regain the parent's privileges. Yes, there's no

Re: setreuid(2)?

2022-11-09 Thread Mouse
> I don't use seteuid(), but, it looks like you can just re-swap the > (uid, euid) in a child binary and regain the parent's privileges. Probably. What does that have to do with what I was after? In my case, the process forks but does not exec; there is only one executable involved. I didn't ex

Re: setreuid(2)?

2022-11-09 Thread RVP
On Wed, 9 Nov 2022, Robert Elz wrote: Yes, there's no question that setreuid() works.Mouse's issue was that setreuid(2) (the man page) says "new code should not use this", yet for what he wanted to achieve (nothing like your code example), the supposed replacement method (relying upon saved user

regex change

2022-11-09 Thread enh
i see (having synced the current NetBSD lib/libc/regex to Android) that regcomp() no longer allows unescaped `{` and `}`. this is technically correct (since POSIX explicitly calls this undefined behavior), but it's a change from historical NetBSD behavior. specifically (since this was the existing