Add a descriptive comment to our usage of setresuid. lib/afs.c needs

to be changed if we decide to set our real uid. Jeremy?

Volker

diff --git a/source/lib/util_sec.c b/source/lib/util_sec.c
index 132748ce138e147b2ae019e78bb970ed7ca9e408..1980b8bfb7cae887023f34002bedfbc92c2f0f6f 100644 (file)
--- a/source/lib/util_sec.c
+++ b/source/lib/util_sec.c
@@ -183,6 +183,10 @@ void gain_root_group_privilege(void)
 void set_effective_uid(uid_t uid)
 {
 #if USE_SETRESUID
+        /* On Systems which have this function, would it not be more
+         * appropriate to also set the real uid by doing
+         * setresuid(uid,uid,-1)? This would make patching AFS
+         * unnecessary. See comment in lib/afs.c. */
        setresuid(-1,uid,-1);
 #endif