X-Git-Url: http://erislabs.net/gitweb/?a=blobdiff_plain;f=lib%2Fidpriv.h;h=06024c281a246cdb4f04762a032a369339dd2978;hb=90bc75734efe584bf3dcdc65e5689123ea78ce11;hp=906627b590e0fd8bccf42980875d6eba2d07d372;hpb=4a9d024d163ecb817de31600402d3df08e2aed2b;p=gnulib.git

diff --git a/lib/idpriv.h b/lib/idpriv.h
index 906627b59..06024c281 100644
--- a/lib/idpriv.h
+++ b/lib/idpriv.h
@@ -1,5 +1,5 @@
 /* Dropping uid/gid privileges of the current process.
-   Copyright (C) 2009 Free Software Foundation, Inc.
+   Copyright (C) 2009-2011 Free Software Foundation, Inc.
 
    This program is free software: you can redistribute it and/or modify
    it under the terms of the GNU General Public License as published by
@@ -72,9 +72,17 @@ extern "C" {
    you should better stay away from this approach.
  */
 
-/* For more in-depth discussion of these topics, see the paper
-   Hao Chen, David Wagner, Drew Dean: Setuid Demystified
-   <http://www.usenix.org/events/sec02/full_papers/chen/chen.pdf>  */
+/* For more in-depth discussion of these topics, see the papers/articles
+   * Hao Chen, David Wagner, Drew Dean: Setuid Demystified
+     <http://www.usenix.org/events/sec02/full_papers/chen/chen.pdf>
+   * Dan Tsafrir, Dilma da Silva, David Wagner: The Murky Issue of Changing
+     Process Identity: Revising "Setuid Demystified"
+     <http://www.eecs.berkeley.edu/~daw/papers/setuid-login08b.pdf>
+     <http://code.google.com/p/change-process-identity/>
+   * Dhruv Mohindra: Observe correct revocation order while relinquishing
+     privileges
+     <https://www.securecoding.cert.org/confluence/display/seccode/POS36-C.+Observe+correct+revocation+order+while+relinquishing+privileges>
+ */
 
 
 /* For approach 2.  */