Linus Torvalds writes: (Summary)
It's not cleared if we are *releasing* capabilities, which is exactly
what might cause a "we can no longer send a signal"
what might cause a "we can no longer send a signal"
Again, that may be exactly what changes - the original process may have uid != euid, and now we're going from an "we still had a root uid/suid" to "dropping everything to euid". The real problem is entirely conceptual: yet more complexity in an area that we've already had problems in before.
area that we've already had problems in before.
Linus
Linus
Linus
[...]
is_setid is set if the uid != eid or gid != egid.Again, that may be exactly what changes - the original process may have uid != euid, and now we're going from an "we still had a root uid/suid" to "dropping everything to euid". The real problem is entirely conceptual: yet more complexity in an area that we've already had problems in before.
area that we've already had problems in before.
Linus
Linus
Linus