[ On Thursday, November 23, 2000 at 02:28:15 (+0900), Noriyuki Soda wrote: ]
> Subject: Re: Addition to force open to open only regular files
>
> Half-open, open-only-normal-files, fsetuid, open_as are all insufficient,
> because there are system calls other than open(2) which is related to
> user's privilege.
> The saved-uid/gid feature can do what those can do, and can cope with
> system calls other than open(2), too.

Exactly.  And that's the problem, not the solution.

Of all the proposals so far open_as() is the only one that provides
sufficient functionality to solve the entire class of problems while at
the same time not making a new set of problems for itself.

-- 
							Greg A. Woods

+1 416 218-0098      VE3TCP      <gwoods@acm.org>      <robohack!woods>
Planix, Inc. <woods@planix.com>; Secrets of the Weird <woods@weird.com>