|
From: <ope...@li...> - 2023-01-19 08:15:28
|
Branch: refs/heads/master Home: https://github.com/OpenVPN/openvpn Commit: d8523119b95db55d2c101b8364ce7e9d0d0f6f3a https://github.com/OpenVPN/openvpn/commit/d8523119b95db55d2c101b8364ce7e9d0d0f6f3a Author: Timo Rothenpieler <ti...@ro...> Date: 2023-01-19 (Thu, 19 Jan 2023) Changed paths: M src/openvpn/platform.c Log Message: ----------- Don't clear capability bounding set on capng_change_id The bounding set being empty will overpower the likes of su/sudo and will make it impossible for any child processes to ever gain additional privileges again. Github: fixes OpenVPN/openvpn#220 Signed-off-by: Timo Rothenpieler <ti...@ro...> Acked-by: Gert Doering <ge...@gr...> Message-Id: <202...@ro...> URL: https://www.mail-archive.com/ope...@li.../msg26048.html Signed-off-by: Gert Doering <ge...@gr...> |