389-ds-base

#49977 Resolve rpmlint issues found by SUSE
Closed by spichugi. Opened by firstyear.
firstyear/389-ds-base 49975-setgid-setuid  into  master

Download 49977.patch

The package maintainer at SUSE kindly pointed out a number of issues
detected by rpmlint. Of the three issues, this resolves two of them.

The first is calling setgroups with an empty group list before setgid
so that we guarantee we only have the target user group remaining
in our permission set when we drop privileges. The second is to remove
a superfluous shebang line from python
https://pagure.io/389-ds-base/issue/49975

ack

Thanks mate, I'll rebase and merge when I get back to my laptop :)

rebased onto e1c693d22e8bf9ee45d9b95b2097dfa382cd70ea

Pull-Request has been merged by firstyear

The problem with this change is that it breaks the ability to run tests on prefix install
There is this error during setup-ds

[22/Oct/2018:12:48:42.484536797 +0200] - ERR - main_setuid - setgroups(0, NULL) != 0, error 1 (Operation not permitted)

@tbordaz Are you running the tests are root or as a user? We should probably handle this case correctly if startup user != root then, and this matters in cntainers too.

Edited by firstyear

Right in prefix install (and in container as well if I understand correctly) the server is started by a regular user. Testing being root, before calling setgroups, looks good to me

@tbordaz Okay, I'm sorry I broke this. I will endeavour to correct it asap. I actually honestly didn't think this feature worked!

389-ds-base is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in 389-ds-base's github repository.

This pull request has been cloned to Github as issue and is available here:
- https://github.com/389ds/389-ds-base/issues/3036

If you want to continue to work on the PR, please navigate to the github issue,
download the patch from the attachments and file a new pull request.

Thank you for understanding. We apologize for all inconvenience.

Pull-Request has been closed by spichugi
Metadata
None
No Tags
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.