CVE-2022-3650: ceph-crash: drop privleges to run as "ceph" user, rather than root
authorTim Serong <tserong@suse.com>
Wed, 2 Nov 2022 03:27:47 +0000 (14:27 +1100)
committerThomas Goirand <zigo@debian.org>
Mon, 9 Oct 2023 06:53:31 +0000 (07:53 +0100)
commit440d1de26480d9d89fdbb6127ae45ba82b748ae8
tree95298e36205d85b5a75dc6098fad0fec79219116
parentd25d786c79700c0673a2db8d449aa57d4e626d67
CVE-2022-3650: ceph-crash: drop privleges to run as "ceph" user, rather than root

Bug: https://tracker.ceph.com/issues/57967
Signed-off-by: Tim Serong <tserong@suse.com>
Origin: upstream, https://github.com/ceph/ceph/commit/130c9626598bc3a75942161e6cce7c664c447382
Bug-Debian: https://bugs.debian.org/1024932
Last-Update: 2022-11-28

If privileges cannot be dropped, log an error and exit.  This commit
also catches and logs exceptions when scraping the crash path, without
which ceph-crash would just exit if it encountered an error.

Gbp-Pq: Name CVE-2022-3650_1_ceph-crash_drop_privleges_to_run_as_ceph_user_rather_than_root.patch
src/ceph-crash.in