The cygwin Server Daemon

[Christopher Faylor]

On Tue, Apr 23, 2002 at 08:51:24AM -0700, Richard Troy wrote:
>Here's what I envision at this point: _execve() code notices the
>suid/guid bits are set, checks that the file owner is not the caller
>and that the callers group list does not include the files group id,
>and dispatches a message to cygserver.  That message includes the path
>to the image - and does not include the owner.group as a secondary
>guard to security at the cost of having to fetch this information a
>second time.

Just a minor nudge, but the code to look at is undoubtedly in spawn.cc,
specifically the spawn_guts function.  The exec calls are all wrappers
for that function.

cgf

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/