[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: how to identify the superuser in C



Hello,
Some documentation I found helpful when I was doing something similar in
a little game I was making.


http://www.cs.utah.edu/dept/old/texinfo/glibc-manual-0.02/library_25.html#SEC429

Chris Shafer
Live Slow. Sail Fast


On Tue, 2002-12-10 at 21:07, Oohara Yuuma wrote:
> I am working on adding a high score list to a game written in C.
> (It's already packaged.)  The high score list will be 664 root:games
> and the game binary will be sgid games --- nothing special here.
> I want to dump and undump the list.  Allowing everyone to undump
> the list will lead to cheating or even security problems, so I want to
> make sure that only the superuser may undump.  Since the binary is
> sgid, some check is necessary before trying to write the list.
> 
> The problem is that there is fakeroot. getuid() == 0 or
> geteuid() == 0 is not enough.  PAM is an overkill.
> I think seteuid(0) == 0 is the best approach.
> Any opinion?
> 
> -- 
> Oohara Yuuma <oohara@libra.interq.or.jp>
> Debian developer
> PGP key (key ID F464A695) http://www.interq.or.jp/libra/oohara/pub-key.txt
> Key fingerprint = 6142 8D07 9C5B 159B C170  1F4A 40D6 F42E F464 A695
> 
> smile to answer
> --- Treasure, "Radiant Silvergun", attitude #3 for SBS-130
> 
> 
> -- 
> To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
> 
> 

Attachment: signature.asc
Description: This is a digitally signed message part


Reply to: