Bug 1896452 - [PATCH] libpam: add supplementary groups on priv drop
Summary: [PATCH] libpam: add supplementary groups on priv drop
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: pam
Version: 33
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Iker Pedrosa
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2020-11-10 15:21 UTC by Allison Karlitskaya
Modified: 2020-12-16 01:27 UTC (History)
3 users (show)

Fixed In Version: pam-1.4.0-8.fc33 pam-1.3.1-30.fc32
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2020-11-19 01:29:14 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)
[PATCH] libpam: add supplementary groups on priv drop (4.58 KB, patch)
2020-11-10 15:21 UTC, Allison Karlitskaya
no flags Details | Diff

Description Allison Karlitskaya 2020-11-10 15:21:40 UTC
Created attachment 1728068 [details]
[PATCH] libpam: add supplementary groups on priv drop

hi,

The recently added support for filtering motd messages by permissions doesn't work for cockpit in its current state because PAM doesn't initialise the supplementary groups of the user.

This has now been fixed in upstream PAM.

Can you please include this as a new vendor patch for Fedora 33?

Thanks

See: https://github.com/linux-pam/linux-pam/pull/292
See: https://github.com/cockpit-project/cockpit/pull/14856

Comment 1 Fedora Update System 2020-11-16 09:52:42 UTC
FEDORA-2020-1efbc2e6ed has been submitted as an update to Fedora 33. https://bodhi.fedoraproject.org/updates/FEDORA-2020-1efbc2e6ed

Comment 2 Fedora Update System 2020-11-17 02:34:36 UTC
FEDORA-2020-1efbc2e6ed has been pushed to the Fedora 33 testing repository.
In short time you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2020-1efbc2e6ed`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2020-1efbc2e6ed

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 3 Fedora Update System 2020-11-19 01:29:14 UTC
FEDORA-2020-1efbc2e6ed has been pushed to the Fedora 33 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 4 Fedora Update System 2020-12-11 14:20:01 UTC
FEDORA-2020-468c33b25d has been submitted as an update to Fedora 32. https://bodhi.fedoraproject.org/updates/FEDORA-2020-468c33b25d

Comment 5 Fedora Update System 2020-12-13 02:41:05 UTC
FEDORA-2020-468c33b25d has been pushed to the Fedora 32 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2020-468c33b25d`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2020-468c33b25d

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 6 Fedora Update System 2020-12-16 01:27:19 UTC
FEDORA-2020-468c33b25d has been pushed to the Fedora 32 stable repository.
If problem still persists, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.