Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: added error check to conform to POS37-C

...

Code Block
bgColor#ffcccc

/* Drop superuser privileges in incorrect order */

if(setuid(getuid());
 == -1) {
  /* handle error condition */
}
if(setgid(getgid())); == -1) {
  /* handle error condition */
}

/* It is still possible to regain group privileges due to incorrect relinquishment order */ 

...

Code Block
bgColor#ccccff

/*  Drop superuser privileges in correct order */


if(setgid(getgid()));
 == -1) {
  /* handle error condition */
}
if(setuid(getuid())); == -1) {
  /* handle error condition */
}

/*  Not possible to regain group privileges due to correct relinquishment order  */ 

...