💾 Archived View for rawtext.club › ~sloum › geminilist › 000609.gmi captured on 2020-09-24 at 02:27:08. Gemini links have been rewritten to link to archived content
-=-=-=-=-=-=-
solderpunk solderpunk at SDF.ORG
Thu May 14 18:38:03 BST 2020
- - - - - - - - - - - - - - - - - - - ``` On Thu, May 14, 2020 at 11:26:23AM -0400, Steve Ryan wrote: > As an FYI, there's is a proposed patch[0] to add proper setuid dropping > for Golang. It's not through yet but is in review and testing stage. > Hopefully it'll make it in for 1.15. Ah, good to know! Thanks very much for bringing this to my attention.I'll keep a close eye on this and put off doing anything else withdynamic content in Molly Brown until it's been accepted. > Otherwise you're correct; all-thread setuid is done either through raw > syscalls and process forking wizardry, syscalls, wrapper programs, etc. Yeah, I'd seen a few examples of this black magic online but it didn'tseem like anything I wanted to put deep trust in. Cheers,Solderpunk