Carlo Arenas <carenas@xxxxxxxxx> writes: > which is also why we can't use it, any possibly bogus or suspicious > value we get from SUDO_UID MUST be ignored. I do not think I agree. If we have strange value in SUDO_UID, it would be much better and safer to err on the safe side. Instead of ignoring, in the situation where we care about the value we read from SUDO_UID (i.e. when euid==0), we should die loudly when it has a strange value.
