diff options
| author | Joe Richey joerichey@google.com <joerichey@google.com> | 2018-08-22 05:17:32 -0700 |
|---|---|---|
| committer | Joe Richey joerichey@google.com <joerichey@google.com> | 2018-08-23 11:00:34 -0700 |
| commit | 3022c1603d968c22f147b4a2c49c4637dd1be91b (patch) | |
| tree | 9d13faee4a46e5516018ddaf18bab7ee9bfa50b7 /go.mod | |
| parent | d4d88e16b54eaa9ba2a8dcb07ba545b60f4d4208 (diff) | |
Ensure setting user privileges is reversible
This change makes sure after dropping then elevating privileges for a
process, the euid, guid, and groups are all the same as they were
originally. This significantly simplifies the privilege logic.
This fixes CVE-2018-6558, which allowed an unprivleged user to gain
membership in the root group (gid 0) due to the groups not being
properly reset in the process.
Diffstat (limited to 'go.mod')
0 files changed, 0 insertions, 0 deletions