Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 453720 - tomcat-instance-manager.bash --group support is broken
Summary: tomcat-instance-manager.bash --group support is broken
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Java team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2013-01-23 19:19 UTC by Hans de Graaff
Modified: 2014-11-02 10:20 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments
Patch for tomcat-instance-manager (453720-instance-manager.patch,662 bytes, patch)
2014-06-13 17:04 UTC, Johann Schmitz (ercpe) (RETIRED)
Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Hans de Graaff gentoo-dev Security 2013-01-23 19:19:37 UTC
tomcat-instance-manager.bash installed with the currently stable tomcat-7.0.32 has a broken --group option.

It uses "id --group <groupname>" to determine if the group is valid, but this restricts the set of groups that can be used to effectively those that the root user is a member of.
Comment 1 Johann Schmitz (ercpe) (RETIRED) gentoo-dev 2014-06-13 17:04:05 UTC
Created attachment 378796 [details, diff]
Patch for tomcat-instance-manager

Proposal to fix tomcat-instance-manager.


Note: I've also replace id --user with getent.
Comment 2 Johann Schmitz (ercpe) (RETIRED) gentoo-dev 2014-08-16 06:23:46 UTC
@java: Any comments on this?
Comment 3 Johann Schmitz (ercpe) (RETIRED) gentoo-dev 2014-11-02 10:20:36 UTC
Fixed in tomcat-6.0.41 and tomcat-7.0.56