You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@mesos.apache.org by "James Peach (JIRA)" <ji...@apache.org> on 2015/04/23 22:14:38 UTC

[jira] [Commented] (MESOS-719) missing-call-to-setgroups

    [ https://issues.apache.org/jira/browse/MESOS-719?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14509705#comment-14509705 ] 

James Peach commented on MESOS-719:
-----------------------------------

https://reviews.apache.org/r/33491/

> missing-call-to-setgroups
> -------------------------
>
>                 Key: MESOS-719
>                 URL: https://issues.apache.org/jira/browse/MESOS-719
>             Project: Mesos
>          Issue Type: Bug
>          Components: general
>    Affects Versions: 0.15.0
>            Reporter: Timothy St. Clair
>            Assignee: James Peach
>              Labels: newbie
>         Attachments: MESOS-719-0.20.1.patch
>
>
> This traces into stout/os.hpp
> in vetting the code as part of fedora packaging, rpmlint outputs an error around priv-changing .
> mesos.x86_64: E: missing-call-to-setgroups /usr/lib64/libmesos-0.15.0.so.0.0.0
> https://www.securecoding.cert.org/confluence/display/seccode/POS36-C.+Observe+correct+revocation+order+while+relinquishing+privileges



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)