mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[PR #5114] [MERGED] Stop warning on safe supplementary group clean #5365
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#5365
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
📋 Pull Request Information
Original PR: https://github.com/netblue30/firejail/pull/5114
Author: @kmk3
Created: 4/22/2022
Status: ✅ Merged
Merged: 4/25/2022
Merged by: @netblue30
Base:
master← Head:stop-warn-group-clean📝 Commits (1)
30c1534Stop warning on safe supplementary group clean📊 Changes
1 file changed (+9 additions, -3 deletions)
View changed files
📝
src/firejail/util.c(+9 -3)📄 Description
When nogroups is used, the following warning may be issued (potentially
multiple times, as drop_privs may be called more than once):
But the warning is being shown even when it seems that all supplementary
groups can be safely dropped (and are thus dropped), which is likely a
common scenario. This commit prevents the warning from being printed in
that case, making it so that it is only shown in the non-happy paths (as
was the case on firejail 0.9.66).
Misc: The added code was copied from drop_privs.
This amends commit
7abce0b4c("Fix keeping certain groups withnogroups", 2021-11-30) / PR #4732.
Kind of relates to #4930.
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.