Interesting that the Unix calls for setting user ids of processes are so varied and so complex, that they warranted an entire paper. I only skimmed, but I did get a pretty good description of the “saved uid” parameter of the setresuid
call.
Interesting that the Unix calls for setting user ids of processes are so varied and so complex, that they warranted an entire paper. I only skimmed, but I did get a pretty good description of the “saved uid” parameter of the setresuid
call.
It turns out the paper “setuid demystified” had some serious flaws, which prompted those guys to write a followup paper:
“revising setuid demystified” [Usenix ;login 2008]
http://www.eecs.berkeley.edu/~daw/papers/setuid-login08b.pdf