From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.org/gmane.linux.lib.musl.general/14773 Path: news.gmane.org!.POSTED.blaine.gmane.org!not-for-mail From: Florian Weimer Newsgroups: gmane.linux.lib.musl.general Subject: Re: posix_spawn Date: Tue, 01 Oct 2019 16:15:54 +0200 Message-ID: <87muektuud.fsf@oldenburg2.str.redhat.com> References: <20190930223632.GW9017@brightrain.aerifal.cx> <20191001022102.GA16318@brightrain.aerifal.cx> <20191001025543.GB16318@brightrain.aerifal.cx> <87pnjhvtch.fsf@oldenburg2.str.redhat.com> <20191001114246.GC16318@brightrain.aerifal.cx> Reply-To: musl@lists.openwall.com Mime-Version: 1.0 Content-Type: text/plain Injection-Info: blaine.gmane.org; posting-host="blaine.gmane.org:195.159.176.226"; logging-data="245342"; mail-complaints-to="usenet@blaine.gmane.org" User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.2 (gnu/linux) Cc: Rich Felker , "musl\@lists.openwall.com" To: Joshua Hudson Original-X-From: musl-return-14789-gllmg-musl=m.gmane.org@lists.openwall.com Tue Oct 01 16:16:21 2019 Return-path: Envelope-to: gllmg-musl@m.gmane.org Original-Received: from mother.openwall.net ([195.42.179.200]) by blaine.gmane.org with smtp (Exim 4.89) (envelope-from ) id 1iFIwv-0011fQ-AR for gllmg-musl@m.gmane.org; Tue, 01 Oct 2019 16:16:21 +0200 Original-Received: (qmail 30712 invoked by uid 550); 1 Oct 2019 14:16:19 -0000 Mailing-List: contact musl-help@lists.openwall.com; run by ezmlm Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-ID: Original-Received: (qmail 30694 invoked from network); 1 Oct 2019 14:16:18 -0000 In-Reply-To: (Joshua Hudson's message of "Tue, 1 Oct 2019 07:07:12 -0700") X-Scanned-By: MIMEDefang 2.79 on 10.5.11.14 X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.5.16 (mx1.redhat.com [10.5.110.31]); Tue, 01 Oct 2019 14:16:06 +0000 (UTC) Xref: news.gmane.org gmane.linux.lib.musl.general:14773 Archived-At: * Joshua Hudson: > You guys open to adding more extensions to posix_spawn? > > The code that I'm actually trying to run is setgroups;setgid;setuid so > I think the use case is common. > > More of the security-critical code being in the library is generally a > good thing. Rich is objecting to my glibc changes. We require unanimous consent at present. Unless I can convince him that his analysis is incorrect, that essentially kills further API additions in this area. Thanks, Florian