4 ms·
That's how you should do it, yes. But the OP was talking about increasing privs in the forked process, which would defeat the security.
by eloff 11y ago
That's how you should do it, yes. But the OP was talking about increasing privs in the forked process, which would defeat the security.
- asveikau 11y agoAnd my point is nobody who knows what they are doing would build it that way. Nobody suggested it ever work that way. OP's doubt on the subject was rooted in a misunderstanding of unix philosophy.
- icebraining 11y agoWho, me? No, I wasn't. I was talking about the plugins keeping the high privileges (not raising them). And that would be because I assumed the plugins, like the main process, were trusted - my idea (like the proposed syscall) would be for the plugins to tame themselves, knowing what privileges they would need to work, and dropping everything else, so that they couldn't be used as an exploit. It wasn't to protect the system from the plugin authors themselves.