Opened 17 years ago
#1242 new defect
Ohana: Multiple groups not respected
| Reported by: | Paul Price | Owned by: | eugene |
|---|---|---|---|
| Priority: | low | Milestone: | |
| Component: | Ohana | Version: | current |
| Severity: | minor | Keywords: | |
| Cc: |
Description
libohana/src/findexec.c checks the group using:
gid = getgid();
if ((gid == filestat.st_gid) && (filestat.st_mode & S_IRGRP) && (filestat.st_mode & S_IWGRP)) {
// Can read
}
However, this neglects the possibility that the user is a member of a group besides his main group that does have access to the file. All groups the user is a member of can be retrieved with getgroups(), and these should all be tested individually.
Note:
See TracTickets
for help on using tickets.
