Re: saved IDs and exec (standard violation?)

[Thomas Bushnell, BSG]

Roland McGrath <roland@frob.com> writes:

> > Oh this is horrible.  Sigh.  However, in the normal case, the ids
> > don't change.  Is there a security reason we should not allow the user
> > to decide for themselves?
> 
> "Allow the user to decide for themselves" does not have a precise meaning
> to me in this context.  Please specify.  

Sorry.  I meant to have the library do the change itself in execve
when it's needed (since usually it's a nop) instead of expecting the
exec server to do it.

But there might be a security reason why we have to force the change
to be made.  But I can't possibly see what that would be.

Thomas