[Bug 2900] Supplementary groups not set for AuthorizedKeysCommand

bugzilla-daemon at bugzilla.mindrot.org bugzilla-daemon at bugzilla.mindrot.org
Sun Mar 8 12:59:08 AEDT 2020


https://bugzilla.mindrot.org/show_bug.cgi?id=2900

Kenny To <sheheitthey at gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |sheheitthey at gmail.com

--- Comment #1 from Kenny To <sheheitthey at gmail.com> ---
Created attachment 3362
  --> https://bugzilla.mindrot.org/attachment.cgi?id=3362&action=edit
set supplementary groups in subprocess

Hi,

I've just run into this bug, and by code inspection it looks like
AuthorizedPrincipalsCommand would also be affected. This patch worked
for me on version 8.1p1. The AuthorizedKeysCommand for the application
I was testing was able to access the files it needs and only had
permissions through its supplementary groups.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list