Menu

#74 missing-call-to-setgroups-before-setuid /usr/sbin/amoldrecover

open
nobody
None
2019-09-16
2017-06-15
Anonymous
No

Originally created by: deadpoint
Originally owned by: chassell

RPMLINT checks from the openSUSE Build Service throw the following warning.

amanda.x86_64: W: missing-call-to-setgroups-before-setuid /usr/sbin/amoldrecover
This executable is calling setuid and setgid without setgroups or initgroups.
There is a high probability this mean it didn't relinquish all groups, and
this would be a potential security issue to be fixed. Seek POS36-C on the web
for details about the problem.

Related

Tickets: #117

Discussion

  • Anonymous

    Anonymous - 2019-09-16

    Originally posted by: chassell

    I can put in something for this

     
  • Anonymous

    Anonymous - 2019-09-16
     

Log in to post a comment.