bugGNU CSSC - Bugs: bug #56891, get produces gfile owned by...

 
 

bug #56891: get produces gfile owned by effective uid, not real uid

Submitted by:  None
Submitted on:  Sat 14 Sep 2019 02:32:03 PM UTC  
 
Category:  None Severity:  3 - Normal
Item Group:  None Status:  None
Privacy:  Public Assigned to:  None
Open/Closed:  Open

Add a New Comment (Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Sat 14 Sep 2019 02:32:03 PM UTC, original submission:  

The new TempPrivDrop code is currently disabled, in effect, because privs.cc does not include the headers needed to activate it.

Also, the optimizer (I'm using g++ 8.3, on Ubuntu 19.04) removes some TempPrivDrop objects unless they are declared "just right".

Enclosed is a small patch that fixes both issues.

Anonymous

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

Attached Files
file #47509:  cssc-setuid-patch.txt added by None (2KiB - text/plain)

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

Do you think this task is very important?
If so, you can add your encouragement to it.
This task has 0 encouragements so far.

Only logged-in users can vote.

 

 

 

Follows 1 latest change.

Date Changed by Updated Field Previous Value => Replaced by
2019-09-14 None Attached File- => Added cssc-setuid-patch.txt, #47509

Back to the top


Powered by Savane 3.5