Package: login
Version: 1:4.8.1-1
Followup-For: Bug #827479
Hello,
The executables installed by newgrp and uidmap are still today setuid
instead of using capabilities
When looking at the build system, it seems tha the newuidmap and
newgidmap are actually meant use the file capabilities instead
Package: login
Version: 1:4.2-3.1
Severity: normal
newgrp is currently setuid root. Since the only superuser activity it
is supposed to execute is changing group status, it would be safer to
use setcap CAP_SETGID instead.
the iputils-ping package made this transition for ping. That package
2 matches
Mail list logo
