> So how is dropping privileges done correctly to avoid getting killed by the user?
I was wondering this too. What is the way to "correctly" drop privileges? Is it even possible to drop privileges within a process in a way that's immune to this?
I was wondering this too. What is the way to "correctly" drop privileges? Is it even possible to drop privileges within a process in a way that's immune to this?
The solution is almost always to use (or add) kernel constructs that would obviate the need to elevate in the first place, but they generally aren’t fine-grained enough so on paper it looks like dropping privileges makes more sense, though in practice it might turn out to be the bigger mistake.
* The machine has no desktop user at the moment
* The program was patched on 04-Nov, I guess addressing this issue.
Don't remember having seen that. Well, sshd does it, but for more obvious reasons than handling signals.