[MacPorts] #50918: buildbot-slave: file mkdir in post-extract creates a dir owned by root

MacPorts noreply at macports.org
Fri Jun 19 13:02:56 UTC 2020


#50918: buildbot-slave: file mkdir in post-extract creates a dir owned by root
---------------------------------+------------------------
  Reporter:  mojca               |      Owner:  neverpanic
      Type:  defect              |     Status:  closed
  Priority:  Normal              |  Milestone:
 Component:  base                |    Version:  2.3.4
Resolution:  fixed               |   Keywords:
      Port:  buildbot-slave-0.8  |
---------------------------------+------------------------
Changes (by neverpanic):

 * status:  accepted => closed
 * resolution:   => fixed


Comment:

 In [changeset:"ac1a9b0991ffb34769847d188a9c71fbce24d65c/macports-base"
 ac1a9b0991ffb34769847d188a9c71fbce24d65c/macports-base] (master):
 {{{
 #!ConfigurableCommitTicketReference repository="macports-base"
 revision="ac1a9b0991ffb34769847d188a9c71fbce24d65c"
 port1.0: Ensure adduser drops privs in all cases

 adduser and addgroup (invoked by the add_users statement in
 handle_add_users) elevates its privileges, but does not always drop them
 again. Specifically, this could happen if a user or group already
 existed, in which case adduser did elevate to root, but not drop back to
 the macportsuser again.

 This can cause files to be created with incorrect permissions, which can
 then cause permissions problems in subsequent phases.

 Closes: https://trac.macports.org/ticket/50918
 }}}

-- 
Ticket URL: <https://trac.macports.org/ticket/50918#comment:14>
MacPorts <https://www.macports.org/>
Ports system for macOS


More information about the macports-tickets mailing list