Can user A kill any root process that's seteuid(A)?
site_archiver@lists.apple.com Delivered-To: darwin-dev@lists.apple.com Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:reply-to:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; b=qt7cOuW6i/EFnyZNm9m+BWvHMkwZxT2Ddm7M831LCKWWw6UiKFTh8wsefcJSrENGev5Z7LKhHQpk1xBryGgqdyrvEzRzprIMEtXtDfHFBbVa47MxKDTdxxWGkwl2MAtSb4xVABqLsmqdCi1vlxSlo+m/s0wnSfHxM1sGqv7mc0U= Hi, I hope the following is not too off-topic for darwin-dev. It seems to be possible for user A to kill -9 a process whose saved set-user-ID is 0 (root) and effective user ID is A's. Is there any way for a process to avoid getting killed like that when doing, say, a seteuid(A)-fopen()-seteuid(0) sequence to access a file under A's permissions (like pppd does with ~/.ppprc)? Thanks, -- Dan _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.appl... This email sent to site_archiver@lists.apple.com
participants (1)
-
Dan Bernstein