Bug 1896452

Summary: [PATCH] libpam: add supplementary groups on priv drop
Product: [Fedora] Fedora Reporter: Allison Karlitskaya <allison.karlitskaya>
Component: pamAssignee: Iker Pedrosa <ipedrosa>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 33CC: besser82, ipedrosa, tmraz
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: pam-1.4.0-8.fc33 pam-1.3.1-30.fc32 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2020-11-19 01:29:14 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
[PATCH] libpam: add supplementary groups on priv drop none

Description Allison Karlitskaya 2020-11-10 15:21:40 UTC 
Created attachment 1728068 [details]
[PATCH] libpam: add supplementary groups on priv drop

hi,

The recently added support for filtering motd messages by permissions doesn't work for cockpit in its current state because PAM doesn't initialise the supplementary groups of the user.

This has now been fixed in upstream PAM.

Can you please include this as a new vendor patch for Fedora 33?

Thanks

See: https://github.com/linux-pam/linux-pam/pull/292
See: https://github.com/cockpit-project/cockpit/pull/14856
Comment 1 Fedora Update System 2020-11-16 09:52:42 UTC 
FEDORA-2020-1efbc2e6ed has been submitted as an update to Fedora 33. https://bodhi.fedoraproject.org/updates/FEDORA-2020-1efbc2e6ed
Comment 2 Fedora Update System 2020-11-17 02:34:36 UTC 
FEDORA-2020-1efbc2e6ed has been pushed to the Fedora 33 testing repository.
In short time you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2020-1efbc2e6ed`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2020-1efbc2e6ed

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
Comment 3 Fedora Update System 2020-11-19 01:29:14 UTC 
FEDORA-2020-1efbc2e6ed has been pushed to the Fedora 33 stable repository.
If problem still persists, please make note of it in this bug report.
Comment 4 Fedora Update System 2020-12-11 14:20:01 UTC 
FEDORA-2020-468c33b25d has been submitted as an update to Fedora 32. https://bodhi.fedoraproject.org/updates/FEDORA-2020-468c33b25d
Comment 5 Fedora Update System 2020-12-13 02:41:05 UTC 
FEDORA-2020-468c33b25d has been pushed to the Fedora 32 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2020-468c33b25d`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2020-468c33b25d

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
Comment 6 Fedora Update System 2020-12-16 01:27:19 UTC 
FEDORA-2020-468c33b25d has been pushed to the Fedora 32 stable repository.
If problem still persists, please make note of it in this bug report.