proposal: add setresuid() system call to python

[travis at subspacefield.org]

On Fri, Jul 17, 2009 at 04:59:53PM -0400, Jean-Paul Calderone wrote:
> On Fri, 17 Jul 2009 15:01:41 -0500, travis+ml-python at subspacefield.org wrote:
>> I am suggesting that the setresuid function be added to python,
>> perhaps in the OS module, because it has the clearest semantics for
>> manipulating user ids.  The reason why is best described in the
>> following paper:
>
> Yes, it'd be good for Python to expose setresuid.  The best course of
> action is to file a ticket in the issue tracker.  Things will be sped
> along if you also attach a patch implementing the change. :)

I'm now working on this as issue6758 in the tracker.

Adding the calls to the os module doesn't seem like a good idea to me,
because the calls are not POSIX, and it appears that os maps to
posixmodule.c.

Since the authors of the paper (Wagner et. al.) are proposing a new
set of APIs to make all of this clearer, I'm thinking that I will
create a module specifically for dropping permissions.
-- 
Obama Nation | My emails do not have attachments; it's a digital signature
that your mail program doesn't understand. | http://www.subspacefield.org/~travis/ 
If you are a spammer, please email john at subspacefield.org to get blacklisted.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 850 bytes
Desc: not available
URL: <http://mail.python.org/pipermail/python-list/attachments/20090821/44d896a5/attachment.sig>