76984 – cherokee-0.4.17 does not reset his groups to the groups of the uid he is running as

Bug 76984 - cherokee-0.4.17 does not reset his groups to the groups of the uid he is running as

Summary: cherokee-0.4.17 does not reset his groups to the groups of the uid he is runn...

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	[OLD] Server (show other bugs)
Hardware:	All Linux

Importance:	High normal (vote)
Assignee:	www-servers Herd (OBSOLETE)

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2005-01-06 20:38 UTC by Emil Beinroth
Modified:	2005-04-17 06:03 UTC (History)
CC List:	0 users

See Also:
Package list:
Runtime testing required:	---

Attachments
Use initgroups(user, gid) to reset groups (cherokee-0.4.17-set_groups.patch,772 bytes, patch) 2005-01-06 20:51 UTC, Emil Beinroth	Details \| Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Emil Beinroth 2005-01-06 20:38:55 UTC

For example, if you execute a cgi-bash-script that just calls /bin/id you get something like
uid=1008(httpd) gid=410(httpd) groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel),11(floppy),20(dialout),26(tape),27(video)

but it should be something like
uid=1008(httpd) gid=410(httpd) groups=410(httpd)


Reproducible: Always
Steps to Reproduce:
1.
2.
3.

Comment 1 Emil Beinroth 2005-01-06 20:51:58 UTC

Created attachment 47805 [details, diff]
Use initgroups(user, gid) to reset groups

Comment 2 Emil Beinroth 2005-04-15 14:05:14 UTC

Patch was included upstream
Should this bug be closed?

Comment 3 Aaron Walker (RETIRED) gentoo-dev

2005-04-17 06:03:49 UTC

Yes, thanks.