CVE-2022-3650: ceph-crash: drop privleges to run as "ceph" user, rather than root
authorTim Serong <tserong@suse.com>
Wed, 2 Nov 2022 03:27:47 +0000 (14:27 +1100)
committerThomas Goirand <zigo@debian.org>
Mon, 28 Nov 2022 11:02:57 +0000 (11:02 +0000)
commit495fce3df2975684c14ea288247757140ed7e551
tree63de19d259a3b755c8fd4a7407ac52145aaecd10
parente00c5bd503ccbdb4f15dfd5d2099eee15b02d0e4
CVE-2022-3650: ceph-crash: drop privleges to run as "ceph" user, rather than root

Bug: https://tracker.ceph.com/issues/57967
Signed-off-by: Tim Serong <tserong@suse.com>
Origin: upstream, https://github.com/ceph/ceph/commit/130c9626598bc3a75942161e6cce7c664c447382
Bug-Debian: https://bugs.debian.org/1024932
Last-Update: 2022-11-28

If privileges cannot be dropped, log an error and exit.  This commit
also catches and logs exceptions when scraping the crash path, without
which ceph-crash would just exit if it encountered an error.

Gbp-Pq: Name CVE-2022-3650_1_ceph-crash_drop_privleges_to_run_as_ceph_user_rather_than_root.patch
src/ceph-crash.in