Re: Support open-process and friends on MS-Windows

[Mark H Weaver]

Eli Zaretskii <address@hidden> writes:
> +# define getuid()              (500) /* Local Administrator */
> +# define getgid()              (513) /* None */
> +# define setuid(u)             (0)
> +# define setgid(g)             (0)

As I've said before, I'm not comfortable with these definitions.  These
are not operations that can be safely ignored.  If we cannot do a job
that's requested of us, we should raise an exception.  We should not
make numbers up out of thin air and pass them off as fact, nor should we
claim to have successfully done a job that we are unable to do.

More to the point, we should not assume that the caller's requests are
unimportant.  Feigning success on ignored requests and fabricating
misinformation might be okay in some cases, but in other cases it is
likely to lead to security holes and other bugs.  For example, a common
pattern is to use 'setuid' to drop privileges before running some
untrusted code.  We must not silently ignore such requests.

      Mark