Relay-Version: version B 2.10 5/3/83; site utzoo.UUCP Posting-Version: version B 2.10.2 9/18/84; site brl-tgr.ARPA Path: utzoo!linus!philabs!cmcl2!seismo!brl-tgr!internet!Christopher A Kent From: Christopher A Kent Newsgroups: net.unix-wizards Subject: whoami useless in setuid programs Message-ID: <5962@brl-tgr.ARPA> Date: Tue, 20-Nov-84 15:42:17 EST Article-I.D.: brl-tgr.5962 Posted: Tue Nov 20 15:42:17 1984 Date-Received: Thu, 22-Nov-84 06:30:55 EST Sender: news@brl-tgr.ARPA Organization: Ballistic Research Lab Lines: 7 Description: whoami returns the real user id, not the effective user id. Repeat-By: create a setuid shell script and run whoami inside it. Fix: Simple -- change the getuid() call in whoami.c to geteuid(). Must have been overlooked in the 4.2 conversion.