lp:~broder/upstart/drop-privileges

Created by Evan Broder and last modified
Get this branch:
bzr branch lp:~broder/upstart/drop-privileges
Only Evan Broder can upload to this branch. If you are Evan Broder please log in for upload directions.

Branch merges

Related bugs

Related blueprints

Branch information

Owner:
Evan Broder
Project:
upstart
Status:
Merged

Recent revisions

1339. By Evan Broder

* init/job_process.c: Cast signed constants to uid_t and gid_t before
  comparing them with the same to correct warnings from the
  build. uid_t and gid_t are unsigned, but -1 is still their dummy
  value

1338. By Evan Broder

* init/tests/test_job_process.c, util/tests/test_user_sessions.sh:
  Test setuid and setgid stanzas as thoroughly as an unprivileged user
  can (i.e. make sure dropping to yourself works, and escalating to
  anything else doesn't)

1337. By Evan Broder

* contrib/vim/syntax/upstart.vim: Add the new setuid and setgid
  stanzas

1336. By Evan Broder

* init/man/init.5: Correct spelling typo and clarify that system jobs
which drop privilege are still system jobs, not user jobs.

1335. By Evan Broder

* init/man/init.5: Document new setuid and setgid stanzas, including
  their behavior when unspecified.

1334. By Evan Broder

* init/job_process.c, init/job_process.h, init/errors.h: If setuid or
  setgid stanzas are specified, drop privileges just before executing
  the job.

1333. By Evan Broder

* init/tests/test_parse_job.c: Test new setuid and setgid stanza
  parsing

1332. By Evan Broder

* init/parse_job.c: Parse setuid and setgid stanzas from config files
  taking a user and group name argument, respectively.

1331. By Evan Broder

* init/tests/test_job_class.c: Test new setuid and setgid JobClass
  attributes

1330. By Evan Broder

* init/job_class.c, init/job_class.h: Add new setuid and setgid fields
  to JobClass

Branch metadata

Branch format:
Branch format 7
Repository format:
Bazaar repository format 2a (needs bzr 1.16 or later)
Stacked on:
lp:upstart
This branch contains Public information 
Everyone can see this information.