Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
openSUSE:Leap:15.5:Update
mcelog.19413
fix_setgroups_missing_call.patch
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File fix_setgroups_missing_call.patch of Package mcelog.19413
--- mcelog.c | 9 +++++++++ 1 file changed, 9 insertions(+) --- a/mcelog.c +++ b/mcelog.c @@ -37,6 +37,7 @@ #include <assert.h> #include <signal.h> #include <pwd.h> +#include <grp.h> #include <sys/wait.h> #include <fnmatch.h> #include "mcelog.h" @@ -1284,6 +1285,14 @@ static void drop_cred(void) { + /* When dropping privileges from root, the `setgroups` call will + * remove any extraneous groups. If we don't call this, then + * even though our uid has dropped, we may still have groups + * that enable us to do super-user things. This will fail if we + * aren't root, so don't bother checking the return value, this + * is just done as an optimistic privilege dropping function. + */ + setgroups(0, NULL); if (runcred.uid != -1U && runcred.gid == -1U) { struct passwd *pw = getpwuid(runcred.uid); if (pw)
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor
