[Bug 2900] New: Supplementary groups not set for AuthorizedKeysCommand

[bugzilla-daemon at bugzilla.mindrot.org]

https://bugzilla.mindrot.org/show_bug.cgi?id=2900

            Bug ID: 2900
           Summary: Supplementary groups not set for AuthorizedKeysCommand
           Product: Portable OpenSSH
           Version: 7.7p1
          Hardware: Other
                OS: All
            Status: NEW
          Severity: minor
          Priority: P5
         Component: ssh
          Assignee: unassigned-bugs at mindrot.org
          Reporter: johannes at kyriasis.com

We recently discovered that when sshd forks to execute the 
AuthorizedKeysCommand, it only runs setres{u,g}id in the new thread,
but 
not setgroups, which means that the supplementary groups are never set 
in the new thread.

First reported here:
  *
https://lists.mindrot.org/pipermail/openssh-unix-dev/2018-July/037040.html
  *
https://lists.mindrot.org/pipermail/openssh-unix-dev/2018-August/037041.html

-- 
You are receiving this mail because:
You are watching the assignee of the bug.