kernel-hardening - compile time warnings in libc for setuid() unused result (was: RLIMIT_NPROC check in set

Message-ID: <20110714163123.GA15828@albatros>
Date: Thu, 14 Jul 2011 20:31:24 +0400
From: Vasiliy Kulikov <segoon@...nwall.com>
To: kernel-hardening@...ts.openwall.com
Subject: compile time warnings in libc for setuid() unused result (was:
 RLIMIT_NPROC check in set_user())

Solar,

Similar thing worth trying to push upstream: for glibc (probably other
widespread libc implementations) edit headers to make compiler complain
if don't use setuid(2) and other capability dropping functions result
code.  It would effectively signal distro maintainers (probably to the
program authors) that there is some significant issue(s) in the sources.

Thanks,

-- 
Vasiliy

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.