[MacPorts] #50918: buildbot-slave: file mkdir in post-extract creates a dir owned by root
MacPorts
noreply at macports.org
Fri Jun 19 13:02:56 UTC 2020
#50918: buildbot-slave: file mkdir in post-extract creates a dir owned by root
---------------------------------+------------------------
Reporter: mojca | Owner: neverpanic
Type: defect | Status: closed
Priority: Normal | Milestone:
Component: base | Version: 2.3.4
Resolution: fixed | Keywords:
Port: buildbot-slave-0.8 |
---------------------------------+------------------------
Changes (by neverpanic):
* status: accepted => closed
* resolution: => fixed
Comment:
In [changeset:"ac1a9b0991ffb34769847d188a9c71fbce24d65c/macports-base"
ac1a9b0991ffb34769847d188a9c71fbce24d65c/macports-base] (master):
{{{
#!ConfigurableCommitTicketReference repository="macports-base"
revision="ac1a9b0991ffb34769847d188a9c71fbce24d65c"
port1.0: Ensure adduser drops privs in all cases
adduser and addgroup (invoked by the add_users statement in
handle_add_users) elevates its privileges, but does not always drop them
again. Specifically, this could happen if a user or group already
existed, in which case adduser did elevate to root, but not drop back to
the macportsuser again.
This can cause files to be created with incorrect permissions, which can
then cause permissions problems in subsequent phases.
Closes: https://trac.macports.org/ticket/50918
}}}
--
Ticket URL: <https://trac.macports.org/ticket/50918#comment:14>
MacPorts <https://www.macports.org/>
Ports system for macOS
More information about the macports-tickets
mailing list