Subject: Re: PAM
From: Ignatios Souvatzis <email@example.com>
Date: 09/25/2002 10:47:39
Content-Type: text/plain; charset=us-ascii
On Wed, Sep 25, 2002 at 10:10:42AM +0200, der Mouse wrote:
> (2) It's also fairly easy to fix; the simplest change that comes to
> mind is to have the magic syscalls affect the parent of the calling
> process rather than the calling process itself. An arguably better
> way would be to have the calls affect "the process on the other end
> of this pipe".
This won't work. There can be zero to N processes at the end of a pipe.
I don't think "affect all processes at the other end of a pipe" is wise...
IMHO this opens us up for interesting future security holes.
-----BEGIN PGP SIGNATURE-----
-----END PGP SIGNATURE-----