httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Aidan Cully <ai...@panix.com>
Subject Re: no calls to seteuid in source tree?
Date Fri, 20 Nov 1998 23:16:30 GMT
On Fri, Nov 20, 1998 at 03:57:05PM, Marc Slemko said:
> On Fri, 20 Nov 1998, Aidan Cully wrote:
> 
> > A quick text-search through the v1.3.3 source seems to indicate that
> > while apache is very careful to set the _real_ userid to the server
> > whose connection we're processing, it never sets the _effective_
> 
> setuid() sets the effective, real, and saved UIDs if the caller is root.

Yes, of course..  silly of me.
--aidan

Mime
View raw message