New answers tagged

0

It does look like portability. E.g this posting on the Samba mailing list with a patch included, subject line, "setgroups requires at least one group": "On some operating systems (in this case BSD/OS 4.2) setgroups must be given at least one group. When no other groups are wanted, it is given the same group as the desired effective group (as seen in ...


0

In the worst case (from the perspective of the security defense, not the attacker), salts do not add any time. All hashing functions, in principle, have a salt: some initial state which is perturbed by passing the string through the algorithm. It's just a question of whether the salt is modifiable (is a parameter of the hash) or fixed. A hashing function ...


2

This almost entirely depends on whether you're temporarily or permanently dropping privileges. In the case of temporarily dropping privileges, it's actually ill-advised to call setgroups with a single group as you'll be wiping the list of ancillary groups, potentially making it impossible (without external intervention) to restore the process back to its ...



Top 50 recent answers are included