Opinion on checking return value of setuid(getuid())?

Erik Cederstrand erik at cederstrand.dk
Mon Oct 1 10:58:40 UTC 2012


Den 01/10/2012 kl. 12.49 skrev Konstantin Belousov <kostikbel at gmail.com>:

> setuid() might also fail for other reasons, e.g. due to custom MAC module.
> 
> In case of ping, does the failure of dropping the suid bit is important ?

I believe it is. If 'setuid()' fails then 'uid' becomes 0 and it's possible e.g. to do a "Flood ping".

Erik


More information about the freebsd-security mailing list