critical impact:

setruid and setrgid - not available; use setresuid and setresgid (CrUn67)

Problem description

The setruid and setrgid routines exist on Tru64 UNIX, but not on HP-UX.However, replacement technology exists in setresuid and setresgid.

The setruid function sets the process real user ID. The setrgid function sets the process real group ID.

Identifiers

setrgid

setruid

See also

• Background information on security related issues impacts
• setrgid(3)
• setruid(3)

Solution description

Change calls in application code.

Replace calls to setruid with setresuid and replace calls to setrgid with setresgid. Note that setresuid and setresgid might not behave exactly the same as setruid and setrgid. Review your code and applicable manpages for more information.

See also

• setresgid(2)
• setresuid(2)

Problem summary