[GH-ISSUE #341] rpmlint error "missing-call-to-setgroups-before-setuid" #243

New issue

Closed

opened 2026-05-05 05:24:21 -06:00 by gitea-mirror · 1 comment

gitea-mirror commented

2026-05-05 05:24:21 -06:00

Owner

Originally created by @HeikoAdams on GitHub (Mar 1, 2016).
Original GitHub issue: https://github.com/netblue30/firejail/issues/341

When running rpmlint on a rpm package build by using the specfile from this repo there is one error listed:

E: missing-call-to-setgroups-before-setuid /usr/lib64/firejail/libtrace.so

Which is explained with:

missing-call-to-setgroups-before-setuid:
This executable is calling setuid and setgid without setgroups or initgroups.
There is a high probability this means it didn't relinquish all groups, and
this would be a potential security issue to be fixed. Seek POS36-C on the web
for details about the problem.

Originally created by @HeikoAdams on GitHub (Mar 1, 2016). Original GitHub issue: https://github.com/netblue30/firejail/issues/341 When running rpmlint on a rpm package build by using the specfile from this repo there is one error listed: > E: missing-call-to-setgroups-before-setuid /usr/lib64/firejail/libtrace.so Which is explained with: > missing-call-to-setgroups-before-setuid: > This executable is calling setuid and setgid without setgroups or initgroups. > There is a high probability this means it didn't relinquish all groups, and > this would be a potential security issue to be fixed. Seek POS36-C on the web > for details about the problem.

gitea-mirror

2026-05-05 05:24:21 -06:00

closed this issue
added the
information_old
label

gitea-mirror commented

2026-05-05 05:24:27 -06:00

Author

Owner

@netblue30 commented on GitHub (Mar 2, 2016):

libtrace.so is overloading a number of functions in glibc for tracing purposes. Calling setuid and setgid from this library is not necessary. This is the responsibility of the calling program.

I know it looks bad in rpmlint, but I don't know how to disable the error message. For Debian .deb files is usually done with a /lintian-overrides.

@netblue30 commented on GitHub (Mar 2, 2016): libtrace.so is overloading a number of functions in glibc for tracing purposes. Calling setuid and setgid from this library is not necessary. This is the responsibility of the calling program. I know it looks bad in rpmlint, but I don't know how to disable the error message. For Debian .deb files is usually done with a /lintian-overrides.

gitea-mirror referenced this issue

2026-05-05 10:03:51 -06:00

[PR #243] [MERGED] Fixing lintian warnings #3571

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#243

No description provided.

Rows
Columns