On 2013-02-02 09:24, Steve Langasek wrote:
> Yes, setresuid() does make a difference over NFS, but it's the wrong
> interface. You should be using setfsuid(), *not* setresuid().
Sorry, but that distinction is above my head. You may want to fight with pitti about it (he suggested setresuid() when sponsoring the accountsservice code). ;-)
> If pam_env is already calling setfsuid() (which makes sense, as this is
> mature and well-exercised code, including on NFS),
That's what I found from reading the code, at least (when I was about to write a patch...). But I may have missed something.
> Someone who can reproduce this will need to trace the issue to see
> what's happening.
On 2013-02-02 09:24, Steve Langasek wrote:
> Yes, setresuid() does make a difference over NFS, but it's the wrong
> interface. You should be using setfsuid(), *not* setresuid().
Sorry, but that distinction is above my head. You may want to fight with pitti about it (he suggested setresuid() when sponsoring the accountsservice code). ;-)
> If pam_env is already calling setfsuid() (which makes sense, as this is
> mature and well-exercised code, including on NFS),
That's what I found from reading the code, at least (when I was about to write a patch...). But I may have missed something.
> Someone who can reproduce this will need to trace the issue to see
> what's happening.
Right.