pt_chown

Mark Kettenis kettenis@gnu.org
Mon Mar 29 07:30:00 GMT 1999


PR 1046 reports a security problem in pt_chown (for which I'll send a
patch later today).  The author also questions the use of argument
parsing and localisation in the program.  I tend to disagree with him
since the argp and gettext code should be safe to use in a setuid
program (actually using it in pt_chown might help us catching bugs).
But since I wrote big parts of the code I may not be very impartial in
this matter.  Does any of us have an opinion on the issue.

Mark



More information about the Libc-hacker mailing list