[Bug-cssc] [bug #56891] get produces gfile owned by effective uid, not real uid

[anonymous]

URL:
  <https://savannah.gnu.org/bugs/?56891>

                 Summary: get produces gfile owned by effective uid, not real
uid
                 Project: GNU CSSC
            Submitted by: None
            Submitted on: Sat 14 Sep 2019 02:32:03 PM UTC
                Category: None
                Severity: 3 - Normal
              Item Group: None
                  Status: None
                 Privacy: Public
             Assigned to: None
             Open/Closed: Open
         Discussion Lock: Any

    _______________________________________________________

Details:

The new TempPrivDrop code is currently disabled, in effect, because privs.cc
does not include the headers needed to activate it.

Also, the optimizer (I'm using g++ 8.3, on Ubuntu 19.04) removes some
TempPrivDrop objects unless they are declared "just right".

Enclosed is a small patch that fixes both issues.



    _______________________________________________________

File Attachments:


-------------------------------------------------------
Date: Sat 14 Sep 2019 02:32:03 PM UTC  Name: cssc-setuid-patch.txt  Size: 2KiB
  By: None

<http://savannah.gnu.org/bugs/download.php?file_id=47509>

    _______________________________________________________

Reply to this item at:

  <https://savannah.gnu.org/bugs/?56891>

_______________________________________________
  Message sent via Savannah
  https://savannah.gnu.org/