POSIX setuid, setguid, setpgrp (setpgid bruh) and implications with examples

matu3ba / sandboxamples

Structured collection of sandbox programs including tests (fs, net access, permissions, process groups [if available]) and system setup programs. No VM stuff.

BSD Zero Clause License

0 stars 0 forks source link

POSIX setuid, setguid, setpgrp (setpgid bruh) and implications with examples #2

Closed matu3ba closed 9 months ago

matu3ba commented 10 months ago

Motivation https://news.ycombinator.com/item?id=35264487 http://catern.com/process.html Mostly to get example programs up and running to illustrate the problem.

[ ] setuid for user imitation
[ ] setpgrp for simple exhaustion/imitation attack

~~Also briefly introduce how POSIX is flawed~~:

~~signaling~~
~~process tracing~~

matu3ba commented 9 months ago

No need to repeat common knowledge, link it instead and provide a solution instead. Closing.