Subject: Re: ktrace and P_SUGID
To: None <cgd@broadcom.com>
From: None <itojun@iijlab.net>
List: tech-security
Date: 06/30/2002 03:26:02
>> > caller->pc_ucred->cr_uid == 0) <----
>> > return (1);
>> Hmm, wouldn't it be better to test caller->pc_ucred->cr_uid == 0
>> first?
>no, it wouldn't, but only because the existing check is incorrect. 8-)
>it should be a call to suser() rather than a simple check that uid ==
>0, and it should be at the end (in the same location as the current
>test).
there are other uses of "cr_uid == 0" in sys/kern. could you
check if any of these are incorrect or not?
(obviously, the one within suser() is okay)
itojun