The "setuid()" in libppd is harmless, it is only for dropping, not for gaining privileges, and the function where it is called, "PipeCommand()", is static, so it is only used in the same file and not available to the outside. Checking the calls in that file, ppd/ppd-collection.cxx, the privilege-dropping facility is even not made use of ...
The "setuid()" in libppd is harmless, it is only for dropping, not for gaining privileges, and the function where it is called, "PipeCommand()", is static, so it is only used in the same file and not available to the outside. Checking the calls in that file, ppd/ppd- collection. cxx, the privilege-dropping facility is even not made use of ...