aboutsummaryrefslogtreecommitdiffstats
path: root/bin
diff options
context:
space:
mode:
authorbwarsaw <>2003-12-14 17:57:40 +0000
committerbwarsaw <>2003-12-14 17:57:40 +0000
commit87bd68cb93a11cf332fc62074009e0ba2c4e9c9f (patch)
tree02b8b9788d57e08d8471bfc77fc0fc1735b49e7b /bin
parent4f72de6d37ea20aeef90e87312c2dd3f1e23202c (diff)
downloadmailman2-87bd68cb93a11cf332fc62074009e0ba2c4e9c9f.tar.gz
mailman2-87bd68cb93a11cf332fc62074009e0ba2c4e9c9f.tar.xz
mailman2-87bd68cb93a11cf332fc62074009e0ba2c4e9c9f.zip
check_privs(): Set the process's supplemental groups to those of the
setuid'd user, if os.setgroup() is available (it's not in Python 2.1). Close SF bug #777444 posted by Richard Barrett, identified and solved by Jonas Muerer.
Diffstat (limited to 'bin')
-rw-r--r--bin/mailmanctl7
1 files changed, 7 insertions, 0 deletions
diff --git a/bin/mailmanctl b/bin/mailmanctl
index 4ebeb836..d49309ea 100644
--- a/bin/mailmanctl
+++ b/bin/mailmanctl
@@ -288,6 +288,13 @@ def check_privs():
uid = pwd.getpwnam(mm_cfg.MAILMAN_USER)[2]
myuid = os.getuid()
if myuid == 0:
+ groups = [x[2] for x in grp.getgrall() if mm_cfg.MAILMAN_USER in x[3]]
+ groups.append(gid)
+ try:
+ os.setgroups(groups)
+ except AttributeError:
+ # Python 2.1 doesn't have setgroups
+ syslog('error', 'Warning: unable to setgroups(%s)' % groups)
os.setgid(gid)
os.setuid(uid)
elif myuid <> uid: