chown() on logfile after setuid() too late
13 Aug
2007
13 Aug
'07
7:12 a.m.
Hi, in src/main/mainconfig.c, function switch_users(), the ownership of the log file (if logging to file) is transferred to the server uid/gid. Because chown() is called after setuid(), it will fail on systems where chown() is a privileged operation. IMHO, chown() should be called just before setuid(). Enrik
6904
Age (days ago)
6904
Last active (days ago)
0 comments
1 participants
participants (1)
-
Enrik Berkhan