Re: fakeroot status

[Thomas Bushnell, BSG]

Roland McGrath <roland@frob.com> writes:

> > Hrm, I'm beginning to wonder whether the mere fact that fakeroot can
> > fake this doesn't mean that the io_identity check isn't sufficient for
> > the security that #! execution needs...
> 
> It only needs security for EXEC_SECURE, in which case a) it doesn't use
> that code (always /dev/fd), and b) you are starting from the real global
> crdir instead of fakeroot's anyway.

Ok.  For the normal case, why do we bother with the io_identity check
at all?