D7124: Avoid dropping privileges by initializing gcrypt secmem

2017-08-22 Thread Fabian Vogt
fvogt closed this revision. fvogt added a comment. Not closed automatically... https://commits.kde.org/kwallet-pam/1a01e1eb870e1ab1d96a8641f1f3500af646c974 REPOSITORY R107 KWallet PAM Integration REVISION DETAIL https://phabricator.kde.org/D7124 To: fvogt, #plasma, mart Cc: plasma-d

D7124: Avoid dropping privileges by initializing gcrypt secmem

2017-08-22 Thread Marco Martin
mart accepted this revision. This revision is now accepted and ready to land. REPOSITORY R107 KWallet PAM Integration BRANCH patch3 REVISION DETAIL https://phabricator.kde.org/D7124 To: fvogt, #plasma, mart Cc: plasma-devel, ZrenBot, progwolff, lesliezhai, ali-mohamed, jensreuterberg, ab

D7124: Avoid dropping privileges by initializing gcrypt secmem

2017-08-04 Thread Fabian Vogt
fvogt created this revision. Restricted Application added a project: Plasma. REVISION SUMMARY It's a documented side effect that initialization of secure memory in gcrypt drops privileges if getuid() != geteuid(). This results in breaking setuid callers, like sudo or su. TEST PLAN Can use