Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Investigate using setgroups() #10

Closed
sionescu opened this issue May 3, 2016 · 3 comments
Closed

Investigate using setgroups() #10

sionescu opened this issue May 3, 2016 · 3 comments

Comments

@sionescu
Copy link
Owner

sionescu commented May 3, 2016

A lint check in OBS gives this message:

W: missing-call-to-setgroups-before-setuid /usr/lib64/libfixposix.so.3.0.0
This executable is calling setuid and setgid without setgroups or initgroups.
There is a high probability this means it didn't relinquish all groups, and
this would be a potential security issue to be fixed. Seek POS36-C on the web
for details about the problem.

@decathorpe
Copy link

I'm working on packaging your project for fedora, and came across this issue, as well. It also looks like it has been promoted from an rpmlint warning to an error:

E: missing-call-to-setgroups-before-setuid /usr/lib64/libfixposix.so.3.2.0

@sionescu
Copy link
Owner Author

sionescu commented Feb 6, 2019

Thank you, I will look into it.

@sionescu
Copy link
Owner Author

sionescu commented Nov 9, 2022

cc0a170 removes the SETUID/SETGID options so this bug is no longer valid.

@sionescu sionescu closed this as completed Nov 9, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants