From f4b65cf4d3c0db3a822ace20e00bb8971234fbbf Mon Sep 17 00:00:00 2001
From: Bruno Haible <bruno@clisp.org>
Date: Thu, 11 Jun 2009 19:15:42 +0200
Subject: [PATCH] Add more references.

---
 ChangeLog    |  4 ++++
 lib/idpriv.h | 14 +++++++++++---
 2 files changed, 15 insertions(+), 3 deletions(-)

diff --git a/ChangeLog b/ChangeLog
index f329cc83fd..c065f8b86f 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,7 @@
+2009-06-11  Bruno Haible  <bruno@clisp.org>
+
+	* lib/idpriv.h: Add more references.
+
 2009-06-08  Bruno Haible  <bruno@clisp.org>
 
 	Tests for module 'idpriv-droptemp'.
diff --git a/lib/idpriv.h b/lib/idpriv.h
index 906627b590..bfa83edfc9 100644
--- a/lib/idpriv.h
+++ b/lib/idpriv.h
@@ -72,9 +72,17 @@ extern "C" {
    you should better stay away from this approach.
  */
 
-/* For more in-depth discussion of these topics, see the paper
-   Hao Chen, David Wagner, Drew Dean: Setuid Demystified
-   <http://www.usenix.org/events/sec02/full_papers/chen/chen.pdf>  */
+/* For more in-depth discussion of these topics, see the papers/articles
+   * Hao Chen, David Wagner, Drew Dean: Setuid Demystified
+     <http://www.usenix.org/events/sec02/full_papers/chen/chen.pdf>
+   * Dan Tsafrir, Dilma da Silva, David Wagner: The Murky Issue of Changing
+     Process Identity: Revising "Setuid Demystified"
+     <http://www.eecs.berkeley.edu/~daw/papers/setuid-login08b.pdf>
+     <http://code.google.com/p/change-process-identity/>
+   * Dhruv Mohindra: Observe correct revocation order while relinquishing
+     privileges
+     <https://www.securecoding.cert.org/confluence/display/seccode/POS36-C.+Observe+correct+revocation+order+while+relinquishing+privileges>
+ */
 
 
 /* For approach 2.  */
-- 
2.30.2