Turning pinfo security on

Pierre A. Humblet pierre@phumblet.no-ip.org
Sat Sep 27 02:37:00 GMT 2003


At 10:21 PM 9/26/2003 -0400, Christopher Faylor wrote:
>On Fri, Sep 26, 2003 at 10:17:00PM -0400, Pierre A. Humblet wrote:
>>Following Chris' new signal handling approach and the previous
>>patch "Giving access to pinfo after seteuid and exec", we can
>>now turn pinfo security on.
>>
>>It's just a matter of removing the FILE_MAP_WRITE permission for
>>Everybody, and a couple of useless PID_MAP_WRITE in pinfo constructors.
>>I have left the PID_MAP_WRITE in the winpids constructors for now,
>>they will be removed later.
>
>You can check this in and just check in the winpids stuff when you get
>around to that step.

OK, I will also remove the "try first to open RW" in the winpids.

BTW, now that your sigpacket includes the sending pid, the commune stuff
could be simplified and avoid calling winpids. It knows whom to talk
to (but it must still double check for security).
Another benefit of your method!

Pierre
 



More information about the Cygwin-patches mailing list