| commit | 0e3bb302dec35e79dc778c3bcd213e063335b67c | |
| author | Corinna Vinschen <corinna@vinschen.de> | |
| Sat, 24 Feb 2024 11:59:28 +0000 (24 12:59 +0100) | ||
| committer | Corinna Vinschen <corinna@vinschen.de> | |
| Sat, 24 Feb 2024 12:08:34 +0000 (24 13:08 +0100) | ||
| tree | b497a398aa544b5332c8fd83e7d22446406ac470 | treesnapshot (tar.gz zip) |
| parent | 808a95d24d6aff7191b4ba4710213f283c5e6379 | commitdiff |
Cygwin: newgrp: only allow group from supplementary group list
Windows only allows to set the primary group to a group already
present in the TOKEN_GROUP list. Cygwin OTOH fakes success at
setgid() time, to allow a subsequent call to setuid() to do
the actual account switching. To have a sane behaviour in the
command line tool, check group membership and disallow to switch
to groups other than those already present in the user token.
Fixes: 8bd56ec873453 ("Cygwin: newgrp: first full version")
Signed-off-by: Corinna Vinschen <corinna@vinschen.de>
Windows only allows to set the primary group to a group already
present in the TOKEN_GROUP list. Cygwin OTOH fakes success at
setgid() time, to allow a subsequent call to setuid() to do
the actual account switching. To have a sane behaviour in the
command line tool, check group membership and disallow to switch
to groups other than those already present in the user token.
Fixes: 8bd56ec873453 ("Cygwin: newgrp: first full version")
Signed-off-by: Corinna Vinschen <corinna@vinschen.de>
| winsup/doc/utils.xml | diffblobblamehistory | |
| winsup/utils/newgrp.c | diffblobblamehistory |