流通图书馆暂时或永久删除所有进程的特权（变化过程的身份）在一个安全的，独立于操作系统，方式

Securely changing the identity of a process is an operating system dependent, subtle, and error-prone business. This project provides a C library to accomplish this task, abstracting away all the low-level non-portable details. The interface allows users to permanently or temporarily change the identity (in the latter case the interface allows the privileges to be restored). The implementation takes care of the real/effective/saved user and group IDs, as well as the supplementary groups. The code was extensively tested on Linux, FreeBSD, OpenSolaris, and AIX. Nevertheless, we warn that, given the history of subtle pitfalls in the set∗id system calls, it may be prudent for developers to avoid relying upon our algorithm until it has been subject to careful review by others. In addition, users of this library should note that it does not account for any "capabilities" systems that the OS might employ. The files to download are 请点击左侧文件开始预览 ！预览只提供20%的代码片段，完整代码需下载后查看 加载中 侵权举报