[
https://issues.apache.org/jira/browse/MESOS-719?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14190759#comment-14190759
]
Ken Simon commented on MESOS-719:
---------------------------------
(I'm not familiar with mesos's jira or review board processes, so I'm not sure
where to put this patch other than here. Anyone who can help me, it would be
appreciated!)
> missing-call-to-setgroups
> -------------------------
>
> Key: MESOS-719
> URL: https://issues.apache.org/jira/browse/MESOS-719
> Project: Mesos
> Issue Type: Bug
> Components: general
> Affects Versions: 0.15.0
> Reporter: Timothy St. Clair
> Labels: newbie
> Attachments: MESOS-719-0.20.1.patch
>
>
> This traces into stout/os.hpp
> in vetting the code as part of fedora packaging, rpmlint outputs an error
> around priv-changing .
> mesos.x86_64: E: missing-call-to-setgroups /usr/lib64/libmesos-0.15.0.so.0.0.0
> https://www.securecoding.cert.org/confluence/display/seccode/POS36-C.+Observe+correct+revocation+order+while+relinquishing+privileges
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
