[Openvpn-commits] [OpenVPN/openvpn] d85231: Don't clear capability bounding set on capng_chang...

[<ope...@li...>]

  Branch: refs/heads/master
  Home:   https://github.com/OpenVPN/openvpn
  Commit: d8523119b95db55d2c101b8364ce7e9d0d0f6f3a
      https://github.com/OpenVPN/openvpn/commit/d8523119b95db55d2c101b8364ce7e9d0d0f6f3a
  Author: Timo Rothenpieler <ti...@ro...>
  Date:   2023-01-19 (Thu, 19 Jan 2023)

  Changed paths:
    M src/openvpn/platform.c

  Log Message:
  -----------
  Don't clear capability bounding set on capng_change_id

The bounding set being empty will overpower the likes of su/sudo
and will make it impossible for any child processes to ever gain
additional privileges again.

Github: fixes OpenVPN/openvpn#220

Signed-off-by: Timo Rothenpieler <ti...@ro...>
Acked-by: Gert Doering <ge...@gr...>
Message-Id: <202...@ro...>
URL: https://www.mail-archive.com/ope...@li.../msg26048.html
Signed-off-by: Gert Doering <ge...@gr...>