missing-call-to-setgroups-before-setuid /usr/sbin/amoldrecover
Amanda Network Backup
Brought to you by:
amandatrusted
Originally created by: deadpoint
Originally owned by: chassell
RPMLINT checks from the openSUSE Build Service throw the following warning.
amanda.x86_64: W: missing-call-to-setgroups-before-setuid /usr/sbin/amoldrecover
This executable is calling setuid and setgid without setgroups or initgroups.
There is a high probability this mean it didn't relinquish all groups, and
this would be a potential security issue to be fixed. Seek POS36-C on the web
for details about the problem.
Originally posted by: chassell
I can put in something for this