httpd-dev mailing list archives

On Sun, 23 Nov 1997, Marc Slemko wrote:

> On Sun, 23 Nov 1997, Jim Jagielski wrote:
> 
> > Urm... Should Apache clear-out it's environment when it does the
> > setuid() call?
> 
> I don't see why.

Agreed. If the module has access to the ps command, it can look at the
root environment anyway, so I don't see this as a large problem.

-- Alexei Kosut <akosut@stanford.edu> <http://www.stanford.edu/~akosut/>
   Stanford University, Class of 2001 * Apache <http://www.apache.org> *