5367f3400c
Games which run setgid from dm, but don't need to, should drop their privileges at startup. Games which have a scorefile should open it at startup, then drop all privileges leaving just the open writable file descriptor. If the game can invoke subprocesses, this should be made close-on-exec. Games with scorefiles should make sure they do not get a file descriptor < 3. (Otherwise, they could get confused and corrupt the scorefile when using stdin, stdout or stderr.) Some old setuid revokes from the days of setuid games change into gid revokes. |
||
---|---|---|
.. | ||
comp.c | ||
end.c | ||
extern.c | ||
init.c | ||
Makefile | ||
mille.6 | ||
mille.c | ||
mille.h | ||
misc.c | ||
move.c | ||
print.c | ||
roll.c | ||
save.c | ||
table.c | ||
types.c | ||
varpush.c |