<div dir="auto"><div><br><br><div class="gmail_quote"><div dir="ltr">On Thu, Oct 18, 2018, 10:51 Rob Landley <<a href="mailto:rob@landley.net">rob@landley.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On 10/17/2018 06:24 PM, enh wrote:<br>
> $ ./toybox su --help<br>
> toybox: Not root (see "toybox --help")<br>
> <br>
> not sure what the fix is there though.<br>
<br>
Hmmm, I think it's that TOYFLAG_NEEDROOT should be checking geteuid() not<br>
getuid(), but that's a security thing and I want to go over all the users<br>
thoroughly before making the change.<br></blockquote></div></div><div dir="auto"><br></div><div dir="auto">Isn't the problem that we should handle --help before checking whether the caller is root?</div><div dir="auto"><br></div><div dir="auto"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
The todo list for this release is now:<br>
<br>
Finish/promote watch<br>
fix crunch_str(): utf8 combining chars are trailing, not leading<br>
promote gzip (decompression side, using lib/deflate.c)<br>
Finish 79c403179b603a9f 482c422f8e8ec51 009b55edc4bad5b4 8993496e496cdbc<br>
getconf: -a, build on musl (missing symbol?)<br>
find -empty<br>
NDK dynamic build (__android_log_write redef)<br>
su - root says "not root"<br>
TOYFLAG_NEEDROOT should check geteuid() not getuid()? Audit everybody.<br>
<br>
Rob<br>
</blockquote></div></div></div>