Re: "per-process" limits (was: Showstopper list)

Andi Kleen (ak@muc.de)
Wed, 14 Oct 1998 11:05:31 +0200


On Tue, Oct 13, 1998 at 11:26:46PM +0200, Alan Cox wrote:
> > currently credentials like gids/uid/euid etc. are thread local, not process
> > local in Linux. This differs from all other Unixes (Solaris, UnixWare etc.)
> > and is probably not Single Unix compliant. For some special applications it
> > is nice to have (e.g. for a multi threaded non anonymous ftp server), but for
> > most threaded applications it is a portability problem and likely to introduce
> > security holes.
>
> You mean add CLONE_CREDENTIALS ?

Yes.

-Andi

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/