Bug 21409 – Improper groupID when running gnorpm-auth

This service will be undergoing maintenance at 00:00 UTC, 2016-09-28. It is expected to last about 1 hours

Bug 21409 - Improper groupID when running gnorpm-auth

Summary:	Improper groupID when running gnorpm-auth

Status:	CLOSED RAWHIDE

Aliases:	None

Product:	Red Hat Linux
Classification:	Retired
Component:	gnorpm (Show other bugs)
Sub Component:
Version:	6.2
Hardware:	i386 Linux

Priority	medium Severity medium
Target Milestone:	---
Target Release:	---
Assigned To:	Jeff Johnson
QA Contact:	Dale Lovelace
Docs Contact:

URL:
Whiteboard:
Keywords:	Security

Depends On:
Blocks:
	Show dependency tree / graph

Reported:	2000-11-28 01:04 EST by zeroday26
Modified:	2007-04-18 12:30 EDT (History)
CC List:	0 users

See Also:
Fixed In Version:
Doc Type:	Bug Fix
Doc Text:
Story Points:	---
Clone Of:
Environment:
Last Closed:	2000-11-28 01:04:20 EST
Type:	---
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Groups: None (edit)

Description zeroday26 2000-11-28 01:04:18 EST

when running gnorpm-auth group ID is not properly changed to
	root anymore- it retains the groupid of the spawning user-
	which may represent a security hole. I am finding the groupIO
	of my usual console user ID all over the system ever since I 
	upgraded to the new gnorpm-auth which was a rerelease of the
	non-functioning gnorpm-auth recently released.(gnorpm package)
	in order to be safe I must now run 'su -c gnorpm' rather than
	gnorpm-auth.

Comment 1 Jeff Johnson 2001-03-05 16:26:10 EST

In gnorpm-0.96, gnorpm.keys no longer mentions gnorpm-auth by default.

Note You need to log in before you can comment on or make changes to this bug.