This is the mail archive of the cygwin-patches@cygwin.com mailing list for the Cygwin project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

Re: Turning pinfo security on


At 10:21 PM 9/26/2003 -0400, Christopher Faylor wrote:
>On Fri, Sep 26, 2003 at 10:17:00PM -0400, Pierre A. Humblet wrote:
>>Following Chris' new signal handling approach and the previous
>>patch "Giving access to pinfo after seteuid and exec", we can
>>now turn pinfo security on.
>>
>>It's just a matter of removing the FILE_MAP_WRITE permission for
>>Everybody, and a couple of useless PID_MAP_WRITE in pinfo constructors.
>>I have left the PID_MAP_WRITE in the winpids constructors for now,
>>they will be removed later.
>
>You can check this in and just check in the winpids stuff when you get
>around to that step.

OK, I will also remove the "try first to open RW" in the winpids.

BTW, now that your sigpacket includes the sending pid, the commune stuff
could be simplified and avoid calling winpids. It knows whom to talk
to (but it must still double check for security).
Another benefit of your method!

Pierre
 


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]