#15387: Problem with path security check if owned by a non-primary group
---------------------------+-------------------------
Reporter: nbruin | Owner:
Type: defect | Status: new
Priority: major | Milestone: sage-5.13
Component: porting | Resolution:
Keywords: | Merged in:
Authors: | Reviewers:
Report Upstream: N/A | Work issues:
Branch: | Commit:
Dependencies: | Stopgaps:
---------------------------+-------------------------
Comment (by nbruin):
One solution is to simply remove the lines:
{{{
+ /* Only keep group bit if the current group ID is the same as
+ * the group of "parent" */
+ if (getgid() != parent_stat.st_gid)
+ arg_stat.st_mode &= 0707;
}}}
with the rationale that the process gid is meant for the ''system'' to
determine for which operations it should trust the ''process''. It doesn't
give information about which ''other groups'' this ''process'' should
trust. That information is simply not available.
Any alternatives?
--
Ticket URL: <http://trac.sagemath.org/ticket/15387#comment:6>
Sage <http://www.sagemath.org>
Sage: Creating a Viable Open Source Alternative to Magma, Maple, Mathematica,
and MATLAB
--
You received this message because you are subscribed to the Google Groups
"sage-trac" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/sage-trac.
For more options, visit https://groups.google.com/groups/opt_out.
