Changeset 125

Timestamp:

10/17/06 11:18:16 (16 years ago)

Author:

bas

Message:

EmailtoTracScript?:

run_email2trac.c:

• setgid() must be called before setuid()

Location:

emailtotracscript/trunk

Files:

• ChangeLog (modified) (1 diff)
• debian/changelog (modified) (1 diff)
• run_email2trac.c (modified) (1 diff)

emailtotracscript/trunk/ChangeLog

@@ -3 +3 @@
           an exception in the syslog if we use sys.exit(0), replaced by
           return.
+
+        * run_email2trac.c. Setgid() must be called before setuid().
+          Reported by:  Anonymous
+          Fixed    by:  Bas van der Vlies
         
 2006-10-10

emailtotracscript/trunk/debian/changelog

@@ +1 @@
+email2trac (0.8.1-3) stable; urgency=low
+
+  * setgid() must be called before setuid() 
+
+ -- root <root@rc.sara.nl>  Tue, 17 Oct 2006 11:17:13 +0200
+
 email2trac (0.8.1-2) stable; urgency=low
 

emailtotracscript/trunk/run_email2trac.c

@@ -109 +109 @@
   check_username(TRAC_USER);
   if ( TRAC = getpwnam(TRAC_USER) ) {
+    setgid(TRAC->pw_gid);
     setuid(TRAC->pw_uid);
-    setgid(TRAC->pw_gid);
   } else {
     if ( DEBUG ) printf("Invalid Trac user (%s)\n",TRAC_USER);