[jira] [Comment Edited] (MESOS-719) missing-call-to-setgroups

["Timothy St. Clair (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/MESOS-719?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14206547#comment-14206547 ] 

Timothy St. Clair edited comment on MESOS-719 at 11/11/14 3:30 PM:
-------------------------------------------------------------------

[~Ken Simon] - I ran the tests and initgroups requires elevated privs to run, so auto-builds will fail on the tests.  



was (Author: tstclair):
[~Ken Simon] - I ran the tests and initgroups requires elevated privs to run, so auto-builds will fail on their tests.  


> missing-call-to-setgroups
> -------------------------
>
>                 Key: MESOS-719
>                 URL: https://issues.apache.org/jira/browse/MESOS-719
>             Project: Mesos
>          Issue Type: Bug
>          Components: general
>    Affects Versions: 0.15.0
>            Reporter: Timothy St. Clair
>              Labels: newbie
>         Attachments: MESOS-719-0.20.1.patch
>
>
> This traces into stout/os.hpp
> in vetting the code as part of fedora packaging, rpmlint outputs an error around priv-changing .
> mesos.x86_64: E: missing-call-to-setgroups /usr/lib64/libmesos-0.15.0.so.0.0.0
> https://www.securecoding.cert.org/confluence/display/seccode/POS36-C.+Observe+correct+revocation+order+while+relinquishing+privileges



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)