@@ -1,3 +1,6 @@ +== 0.10.1 (future) +* Fixed a potential privilege escalation issue <jdamato@alumni.cmu.edu> + == 0.10.0 * Solved compatibility issues with the new (and awesome, thanks mperham) Memcache client * Fixed the old rspec tests. CHANGELOG @@ -182,8 +182,8 @@ module StarlingServer end def drop_privileges - Process.egid = options[:group] if options[:group] - Process.euid = options[:user] if options[:user] + Process::Sys.setresgid(options[:group], options[:group], options[:group]) if options[:group] + Process::Sys.setresuid(options[:user], options[:user], options[:user]) if options[:user] end def shutdown lib/starling/server_runner.rb 76ff9ca587960151329f7204589049b7c9682f61 Joe Damato ice799@gmail.com http://github.com/starling/starling/commit/cbb07c4e7af7f831512a70a926f80dbced94d2ff cbb07c4e7af7f831512a70a926f80dbced94d2ff 2009-04-10T08:29:54-07:00 2009-04-09T16:47:04-07:00 drop privs permanently. 627021b00c9321286d95c970ce925ef741927347 Chris Gaffney cgaffney@crayoninterface.com