This is an automatic generated email to let you know that the following patch were queued at the http://git.linuxtv.org/cgit.cgi/xawtv3.git tree:
Subject: alevtd: Drop supplementary group IDs when dropping privileges Author: Hans de Goede <[email protected]> Date: Mon Feb 15 23:10:12 2016 +0100 Noticed by rpmlint, seek POS36-C on the web for details about the problem. Signed-off-by: Hans de Goede <[email protected]> vbistuff/alevtd.c | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) --- http://git.linuxtv.org/cgit.cgi/xawtv3.git/commit/?id=2344af22120f3092a044881c4ed14af17a0d6f41 diff --git a/vbistuff/alevtd.c b/vbistuff/alevtd.c index c6211d39d569..2df488672254 100644 --- a/vbistuff/alevtd.c +++ b/vbistuff/alevtd.c @@ -168,8 +168,10 @@ fix_ug(void) } /* set group */ - if (getegid() != gr->gr_gid || getgid() != gr->gr_gid) + if (getegid() != gr->gr_gid || getgid() != gr->gr_gid) { + setgroups(0, NULL); setgid(gr->gr_gid); + } if (getegid() != gr->gr_gid || getgid() != gr->gr_gid) { xerror(LOG_ERR,"setgid failed",NULL); exit(1); @@ -177,8 +179,10 @@ fix_ug(void) strncpy(group,gr->gr_name,16); /* set user */ - if (geteuid() != pw->pw_uid || getuid() != pw->pw_uid) + if (geteuid() != pw->pw_uid || getuid() != pw->pw_uid) { + setgroups(0, NULL); setuid(pw->pw_uid); + } if (geteuid() != pw->pw_uid || getuid() != pw->pw_uid) { xerror(LOG_ERR,"setuid failed",NULL); exit(1); _______________________________________________ linuxtv-commits mailing list [email protected] http://www.linuxtv.org/cgi-bin/mailman/listinfo/linuxtv-commits
