On Fri, Nov 20, 2015 at 02:01:44PM +0100, Sumit Bose wrote:
ok, new version attached.
Thank you, I'll just wait for the CI workers to finish crunching the
patches..
Code-wise ACK.
>
> The only thing to remember now is that if we hand out the upstream
> packages, we need to make sure that /proc/sys/fs/suid_dumpable is set to
> 2 if we ask people to collect corefiles. But since the audience of
> upstream packages is typically limited and we ask people to run them, I
> think it's OK.
yes, but since p11_child does not need the suid bit anymore this relates
more to e.g. krb5_child.
bye,
Sumit
Unfortunately this related to any call that calls setuid, so even to
backends that /drop/ privileges :-(