Supplementary groups not set for AuthorizedKeysCommand

Damien Miller djm at mindrot.org
Wed Aug 1 10:46:51 AEST 2018


On Sun, 29 Jul 2018, Johannes Löthberg wrote:

> Hey,
> 
> We just discovered that when sshd forks to execute the 
> AuthorizedKeysCommand, it only runs setres{u,g}id in the new thread, but 
> not setgroups, which means that the supplementary groups are never set 
> in the new thread.  This feels quite strange, so I was wondering whether 
> this is intended behaviour or not.  If not, it would be quite easy to 
> fix this.

Hi,

Could you file a bug at https://bugzilla.mindrot.org so this doesn't
get lost?

Thanks,
Damien


More information about the openssh-unix-dev mailing list