Subject: Re: kern.showallprocs implementation
To: None <tech-security@netbsd.org>
From: Rui Paulo <alpha1@freeshell.org>
List: tech-security
Date: 06/27/2004 19:39:38
On 2004.06.27 18:15:08 +0000, Wolfgang Solfrank wrote:
> Note that you should do the suser() call only after being sure
> that you need root priviledges here, i.e. first compare the
> uids, then call suser().  The subtle difference being that
> p_acflag records the fact that superuser priviledges were
> neccessary for the process.
Ok. Since this was a for cycle, I don't think that modifying p_acflag is
really necessary. Just a simple uid check is necessary here IMHO.

Regards.

-- 
  "Simplicity is the ultimate 
    sophistication." 
    -- Leonardo da Vinci