pt_chown
Mark Kettenis
kettenis@gnu.org
Mon Mar 29 07:30:00 GMT 1999
PR 1046 reports a security problem in pt_chown (for which I'll send a
patch later today). The author also questions the use of argument
parsing and localisation in the program. I tend to disagree with him
since the argp and gettext code should be safe to use in a setuid
program (actually using it in pt_chown might help us catching bugs).
But since I wrote big parts of the code I may not be very impartial in
this matter. Does any of us have an opinion on the issue.
Mark
More information about the Libc-hacker
mailing list