httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Alexei Kosut <ako...@leland.Stanford.EDU>
Subject Re: Environment
Date Sun, 23 Nov 1997 22:38:32 GMT
On Sun, 23 Nov 1997, Marc Slemko wrote:

> On Sun, 23 Nov 1997, Jim Jagielski wrote:
> 
> > Urm... Should Apache clear-out it's environment when it does the
> > setuid() call?
> 
> I don't see why.

Agreed. If the module has access to the ps command, it can look at the
root environment anyway, so I don't see this as a large problem.

-- Alexei Kosut <akosut@stanford.edu> <http://www.stanford.edu/~akosut/>
   Stanford University, Class of 2001 * Apache <http://www.apache.org> *



Mime
View raw message