DO NOT REPLY [Bug 43499] - apr_global_mutex_create returns error "Access denied"

[bu...@apache.org]

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=43499>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=43499





------- Additional Comments From wrowe@apache.org  2007-09-27 06:17 -------
Typically not; no process other than the other-child, different user context
should have access to that lock.

The right thing is to pass that mutex handle to the child.  The only way to
do so, of course, is to Duplicate it across processes and pass the child
the identity of it's copy of the handle.  The httpd/server/mpm/winnt/mpm_winnt.c
does so.  However, this was never abstracted into apr.

Clearly, some of the accessors used by mpm_winnt are going to need to be
abstracted into apr for the 1.3 or 2.0 version.

Widening the access to the created mutex as you suggest typically creates
too many exploit patterns.

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@apr.apache.org
For additional commands, e-mail: bugs-help@apr.apache.org