Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 166950 - net-proxy/squid is forced to use cache_effective_group because the defaults are changed by gentoo patch
Summary: net-proxy/squid is forced to use cache_effective_group because the defaults a...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Gentoo Network Proxy Developers (OBSOLETE)
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2007-02-15 02:37 UTC by Thomas Rydzynski
Modified: 2007-02-25 20:31 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Thomas Rydzynski 2007-02-15 02:37:20 UTC 
Ebuild net-proxy/squid/squid-2.6.9.ebuild patches squid with squid-2.6.9-gentoo.patch that changes default cache_effective_group setting.

I file this bug because there seems to be no way to use the original (empty) value and squid permissions are affected in a way that breaks some configurations.

It is so because squid calls setgroups(2) if the cache_effective_group was set and as a result of this, there is no way to add user squid to other groups, as their privileges are dropped. 

The affected code I am talking about is in the leave_suid function (src/tools.c:605).

Regards

Reproducible: Always

Steps to Reproduce:
Comment 1 Alin Năstac (RETIRED) gentoo-dev 2007-02-25 20:31:33 UTC 
Fixed in squid-2.6.9-r1. Thanks!