GNU Core Utilities - Bugs: bug #10384, chroot feature request: --user and...
You are not allowed to post comments on this tracker with your current authentication level.
bug #10384: chroot feature request: --user and --group parameters
Submitter: | Chris Carpinello <chriscarpinello> | ||
Submitted: | Tue 14 Sep 2004 08:42:43 PM UTC | ||
Category: | None | Severity: | 3 - Normal |
Item Group: | None | Status: | Fixed |
Privacy: | Public | Assigned to: | None |
Open/Closed: | Closed |
Jump to the original submission
Fri 06 Feb 2015 07:37:46 AM UTC, comment #6: |
Bernhard Voelker <berny> |
Sat 02 May 2009 12:14:57 PM UTC, comment #5: Here a new patch that adds the feature we discussed before. Now it is possible to specify a list of additional groups using -g/--groups.
|
Giuseppe Scrivano <gscrivano> |
Sat 02 May 2009 10:42:31 AM UTC, comment #4: That's an option, certainly, and if the default is to remove supplementary groups, it's pretty safe.
|
James Youngman <jay> |
Sat 02 May 2009 10:17:42 AM UTC, comment #3: what do you think about adding another argument --groups=g1,g2,...,gn? When it is specified supplementary groups are setted to the specified ones, if it is not specified then the original ones are kept. |
Giuseppe Scrivano <gscrivano> |
Sat 02 May 2009 10:05:09 AM UTC, comment #2: What about supplementary group IDs? In the general case the caller will be privileged and want to drop those privileges. Some of the supplementary groups will be privileged. |
James Youngman <jay> |
Fri 01 May 2009 09:53:22 PM UTC, comment #1: In the attached patch I added the possibility to specify an user:group.
|
Giuseppe Scrivano <gscrivano> |
Tue 14 Sep 2004 08:42:43 PM UTC, original submission:
Add support for --user and --group parameters that setuid/seteuid and setgid/setegid respectively after the chroot() is performed. |
Chris Carpinello <chriscarpinello> |
Depends on the following items: None found
Items that depend on this one: None found
There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.
Follow 4 latest changes.
Date | Changed by | Updated Field | Previous Value | => | Replaced by |
---|---|---|---|---|---|
2015-02-06 | berny | Status | None | Fixed | |
Open/Closed | Open | Closed | |||
2009-05-02 | gscrivano | Attached File | - | Added chroot_userspec.diff, #18074 | |
2009-05-01 | gscrivano | Attached File | - | Added chroot_userspec.diff, #18071 |
Powered by Savane 3.13-3230.
Corresponding source code
The feature is available since v7.5, i.e., ~6 years now; thus closing.