Re: Hey Theo!

["Todd C. Miller" <Todd.Miller@courtesan.com>]

In message <20020804194005.GB25898@garage.freebsd.pl>
	so spake Pawel Jakub Dawidek (nick):

> Cron file are owned by users, so all tests, openning file, etc. could
> be done without uid 0. We can just take file name from /var/cron/tabs/
> get user's uid, call fork() and setuid(his_uid); setgid(crontab_gid).
> And now we could try to open this file and made all tests.

I suppose cron could fork, set ids to the user, read in the crontab,
and then pass the data to the parent over a socketpair.  Since we
hace O_NOFOLLOW and O_NONBLOCK there doesn't seem to be a lot to
gain from this approach but I'll think about it.  The parent would
need to timeout and kill the child if it stopped responding too.

 - todd