Subject: Re: LD_CHROOT idea
To: Luke Mewburn <lukem@wasabisystems.com>
From: Andrew Brown <atatat@atatdot.net>
List: tech-security
Date: 04/06/2001 02:35:25
>If LD_CHROOT is set and the process isn't setuid or setgid, then

so...

	if (getenv("LD_CHROOT") &&
	    !getuid() && !geteuid() && getgid == getegid()) {
		...do chroot stuff...
	}

yesh?  does it really matter if a program is suid (or sgid) to
something we already had access to?

-- 
|-----< "CODE WARRIOR" >-----|
codewarrior@daemon.org             * "ah!  i see you have the internet
twofsonet@graffiti.com (Andrew Brown)                that goes *ping*!"
andrew@crossbar.com       * "information is power -- share the wealth."