Menu

#20 Patch: Missing call to setgroups

Unstable_(example)
open
chtsanti
security (1)
1
2014-08-04
2014-08-04
Lars Vogdt
No

When compiling c-icap 0.3.4 in the openSUSE Build Service, I get the following informational output from rpmlint:

missing-call-to-setgroups-before-setuid /usr/bin/c-icap
This executable is calling setuid and setgid without setgroups or initgroups.
There is a high probability this mean it didn't relinquish all groups, and
this would be a potential security issue to be fixed. Seek POS36-C on the web
for details about the problem.

I used the attached patch to get rid of the message. Maybe you can check/integrate this ?

1 Attachments

Discussion

Anonymous
Anonymous

Add attachments
Cancel





MongoDB Logo MongoDB