prelink should not mess with running executables
Sam Varshavchik
mrsam at courier-mta.com
Mon Jul 16 23:33:36 UTC 2012
Richard W.M. Jones writes:
> I suspect there is still a small race window, even if you've got the
> right %post hook.
>
> Does it need to be the same executable? Isn't it sufficient to check
> that it's the same user (ie. using SO_PEERCRED):
>
> http://www.perlmonks.org/?node_id=952805
>
> Or perhaps something using SCM_RIGHTS/SCM_CREDENTIALS ...
Well, SCM_RIGHTS/SCM_CREDENTIALS is how you get the peer's pid in the first
place.
This would be an additional check, on top of that.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
URL: <http://lists.fedoraproject.org/pipermail/devel/attachments/20120716/83c4a6b1/attachment.sig>
More information about the devel
mailing list