OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Extra permissions restrictions with pipe commands?

From: Victor Duchovni (Victor.Duchovnimorganstanley.com)
Date: Fri Oct 15 2010 - 11:32:09 CDT


On Fri, Oct 15, 2010 at 11:22:34AM -0500, Andy Theuninck wrote:

> 4. Cannot write to locations that are group-writable and set to some
> other group - even if the user nobody is part of the relevant group.

Postfix does not initialize secondary groups when running commands as
the $default_privs user. Only the uid and the primary group are set.

--
        Viktor.