| |||||||||||||
On the importance of return codesOn the importance of return codesPosted Dec 3, 2009 13:45 UTC (Thu) by nix (subscriber, #2304)Parent article: On the importance of return codes
The runtime loader hasn't called setuid() for the ping binary: the kernel has. The whole point of the setuid model is that only the kernel's exec() implementation(s) can elevate privileges: potentially-unprivileged code (like the dynamic loader) cannot.
(Log in to post comments)
On the importance of return codes Posted Dec 3, 2009 14:25 UTC (Thu) by jake (editor, #205) [Link]
> The runtime loader hasn't called setuid() for the ping binary:
> the kernel has.
Yes, of course, thanks for pointing that out.
jake
|
|||||||||||||