Review Request 113518: KDM/KFrontend: Avoid potentially exploitable privilege dropping

[Martin Bříza]

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://git.reviewboard.kde.org/r/113518/
-----------------------------------------------------------

(Updated Jan. 2, 2014, 3:28 p.m.)


Status
------

This change has been discarded.


Review request for kde-workspace and Oswald Buddenhagen.


Repository: kde-workspace


Description
-------

Initialize the user's groups in between calling setegid and seteuid to have the correct supplemental groups in place.


Diffs
-----

  kdm/kfrontend/kgreeter.cpp 1bddab5 

Diff: https://git.reviewboard.kde.org/r/113518/diff/


Testing
-------


Thanks,

Martin Bříza

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.kde.org/pipermail/kde-core-devel/attachments/20140102/1041d667/attachment.htm>