Bug 222177 – File::writable? gives incorrect result if process changes euid/egid

Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.

Bug 222177 - File::writable? gives incorrect result if process changes euid/egid

Summary:	File::writable? gives incorrect result if process changes euid/egid

Status:	CLOSED DEFERRED

Aliases:	None

Product:	Red Hat Enterprise Linux 5
Classification:	Red Hat
Component:	ruby (Show other bugs)
Sub Component:
Version:	5.0
Hardware:	All Linux

Priority	medium Severity medium
Target Milestone:	---
Target Release:	---
Assigned To:	Akira TAGOH
QA Contact:	Bill Huang
Docs Contact:

URL:
Whiteboard:
Keywords:

Depends On:
Blocks:	229475
	Show dependency tree / graph

Reported:	2007-01-10 14:09 EST by David Lutterkort
Modified:	2013-04-30 19:40 EDT (History)
CC List:	2 users (show)

See Also:
Fixed In Version:
Doc Type:	Bug Fix
Doc Text:
Story Points:	---
Clone Of:
Environment:
Last Closed:	2007-06-05 16:43:42 EDT
Type:	---
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Ruby script demonstrating the problem (run as root) (645 bytes, text/plain) 2007-01-10 14:09 EST, David Lutterkort	no flags	Details
Add an attachment (proposed patch, testcase, etc.)

Groups: None (edit)

Description David Lutterkort 2007-01-10 14:09:33 EST

When a ruby script running as root changes euid/egid, the results of
File::writable?(f) and File::stat(f).writable? will differ because one uses
glibc's eaccess while the other doesn't (and File::writable? is wrong). The
attached program demonstrates the problem.

This bug is ultimately caused by a bug in glibc's eaccess
(http://sourceware.org/bugzilla/show_bug.cgi?id=3846) but it's a separate
regression in ruby-1.8.5 (compared to earlier versions of the ruby RPM) since
the ruby-1.8.5 rpm's now use eaccess where older ones used ruby's own code to
simulate eaccess.

A simple fix would be to build ruby w/o HAVE_EACCESS as it has been build in the
past until the glibc bug is fixed.

Comment 1 David Lutterkort 2007-01-10 14:09:33 EST

Created attachment 145276 [details]
Ruby script demonstrating the problem (run as root)

Comment 2 RHEL Product and Program Management 2007-06-05 16:43:42 EDT

This request was evaluated by Red Hat Product Management for
inclusion in a Red Hat Enterprise Linux release.  Since this
bugzilla is in a component that is not approved for the current
release, it has been closed with resolution deferred.  You may
reopen this bugzilla for consideration in the next release.

Note You need to log in before you can comment on or make changes to this bug.