Guy Harris noted that there indeed is a call to setreuid in uucico to
set the uid to 4. However, since /usr/lib/uucp/uucico is a setuid
program that has its uid set to the uucp uid found in the NIS, wouldn't
it be the case that the setreuid call fails and uucico just ignores
that fact and goes on using the proper uucp uid?
I fell into the trap of running trace on uucico as root and indeed saw
the setreuid call succeed. However, it seems that when uucico runs
normally, it will be running as the user uucp and the setreuid will
fail.
Of course, trace won't run against a setuid program unless you run it
as root, so it is very hard to confirm this.
-- Paul Lutt Domain: pwl@tc.fluke.COM Voice: +1 206 356 5059 UUCP: uunet!fluke!pwl Snail: John Fluke Mfg. Co. / P.O. Box 9090 / Everett, WA 98206-9090
This archive was generated by hypermail 2.1.2 : Fri Sep 28 2001 - 23:06:40 CDT