openstack/oslo.privsep
Code Issues Proposed changes
OpenStack library for privilege separation
307 Commits 10 Branches 101 Tags 2.8 MiB
Python 100%
33fec1971b
Go to file
Max Lamprecht 33fec1971b setgid should be called before setuid 
If you setuid to a non-zero value first(meaning you're no longer root),
then call setgroups, the effective uid of the process
is now no longer root, meaning that the internal setgid call fails

This also removes the duplicated if loop

Closes-Bug: #1628360
Change-Id: I5d66fccd9ffb07df0c2e4435ec3da767b3b61117
2023-03-03 08:49:26 +01:00
doc Remove unnecessary unicode prefixes 2022-04-19 15:11:57 +08:00
oslo_privsep setgid should be called before setuid 2023-03-03 08:49:26 +01:00
releasenotes setgid should be called before setuid 2023-03-03 08:49:26 +01:00
.coveragerc Initial cookiecutter project 2015-10-23 18:51:29 +11:00
.gitignore Move doc related modules to doc/requirements.txt 2019-07-06 02:15:13 +08:00
.gitreview OpenDev Migration Patch 2019-04-19 19:48:27 +00:00
.mailmap Initial cookiecutter project 2015-10-23 18:51:29 +11:00
.pre-commit-config.yaml Upgrade the pre-commit-hooks version 2021-05-18 11:13:56 +08:00
.stestr.conf Add functional tests 2019-12-11 10:26:01 +00:00
.zuul.yaml Add Python3 antelope unit tests 2022-09-09 09:17:57 +00:00
CONTRIBUTING.rst Align contributing doc with oslo's policy 2020-05-04 18:27:35 +02:00
HACKING.rst Update URLs in documents according to document migration 2017-07-12 23:09:35 +08:00
LICENSE Initial cookiecutter project 2015-10-23 18:51:29 +11:00
README.rst Replace git.openstack.org URLs with opendev.org URLs 2019-04-30 13:27:01 +08:00
requirements.txt [goal] Migrate testing to ubuntu focal 2020-08-04 03:45:01 +00:00
setup.cfg Drop python3.6/3.7 support in testing runtime 2022-05-05 16:03:55 +02:00
setup.py remove outdated header 2020-02-11 18:51:53 +01:00
test-requirements.txt Adding pre-commit 2020-09-08 14:17:12 +02:00
tox.ini Changed minversion in tox to 3.18.0 2021-06-07 16:55:32 +08:00

README.rst

Team and repository tags

image

oslo.privsep

Latest Version

OpenStack library for privilege separation

This library helps applications perform actions which require more or less privileges than they were started with in a safe, easy to code and easy to use manner. For more information on why this is generally a good idea please read over the principle of least privilege and the specification which created this library.