Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
home:bmwiedemann:reproducible:distribution:ring1
mcelog
fix_setgroups_missing_call.patch
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File fix_setgroups_missing_call.patch of Package mcelog
--- mcelog.c | 9 +++++++++ 1 file changed, 9 insertions(+) Index: mcelog-198/mcelog.c =================================================================== --- mcelog-198.orig/mcelog.c +++ mcelog-198/mcelog.c @@ -37,6 +37,7 @@ #include <assert.h> #include <signal.h> #include <pwd.h> +#include <grp.h> #include <sys/wait.h> #include <fnmatch.h> #include "mcelog.h" @@ -1163,6 +1164,14 @@ static void general_setup(void) static void drop_cred(void) { + /* When dropping privileges from root, the `setgroups` call will + * remove any extraneous groups. If we don't call this, then + * even though our uid has dropped, we may still have groups + * that enable us to do super-user things. This will fail if we + * aren't root, so don't bother checking the return value, this + * is just done as an optimistic privilege dropping function. + */ + setgroups(0, NULL); if (runcred.uid != -1U && runcred.gid == -1U) { struct passwd *pw = getpwuid(runcred.uid); if (pw)
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor
