aboutsummaryrefslogtreecommitdiff
path: root/debian/patches/602_nx-X11_initgroups.full.patch
Commit message (Collapse)AuthorAgeFilesLines
* Be compliant with POS36-C: Observe correct revocation order while ↵Orion Poplawski2015-02-131-67/+0
| | | | | | | | | | | | | | | | relinquishing privileges (602_nx-X11_initgroups.full.patch). The Fedora review of NX (redistributed) caught the following rpmlint issue: This executable is calling setuid and setgid without setgroups or initgroups. There is a high probability this mean it didn't relinquish all groups, and this would be a potential security issue to be fixed. Seek POS36-C on the web for details about the problem. Ref POS36-C: https://www.securecoding.cert.org/confluence/display/seccode/POS36-C.+Observe+correct+revocation+order+while+relinquishing+privileges This patch adds initgroups() calls to the code to initialize the supplemental group list.
* Add patch: 602_nx-X11_initgroups.full.patch. Fix calling setuid and setgid ↵Mike Gabriel2013-08-291-0/+67
without setgroups or initgroups. There is a high probability this means it didn't relinquish all groups, and this would be a potential security issue to be fixed. Seek POS36-C on the web for details about the problem. (Fixes: #293).