4 ms·
Impersonation code is some of the worst and scariest to write. I've seen advisory after advisory just on user impersonation. Just no. Don't implement. If you
by crankylinuxuser 8y ago
Impersonation code is some of the worst and scariest to write.
I've seen advisory after advisory just on user impersonation. Just no. Don't implement.
If you want to impersonate, use a private session or have users you control do the testing.
- rhizome 8y agoThis is why it took Microsoft 20 years to write 'runas.' Privilege elevation is easy, privilege-shedding is hard, and probably magnitudes more difficult when the OS didn't grow up with it like Unix has.