CVE-2022-3650: ceph-crash: drop privleges to run as "ceph" user, rather than root
authorTim Serong <tserong@suse.com>
Wed, 2 Nov 2022 03:27:47 +0000 (14:27 +1100)
committerThomas Goirand <zigo@debian.org>
Fri, 27 Jan 2023 15:46:08 +0000 (15:46 +0000)
commit70df4ad6e2f4f1b6f4a7f725f40c97736c79dc8b
treecbcbf66bc13099cca005c781ed5e267398325ba3
parent381f446834738067031b88929d6d0ad333dc8d79
CVE-2022-3650: ceph-crash: drop privleges to run as "ceph" user, rather than root

Bug: https://tracker.ceph.com/issues/57967
Signed-off-by: Tim Serong <tserong@suse.com>
Origin: upstream, https://github.com/ceph/ceph/commit/130c9626598bc3a75942161e6cce7c664c447382
Bug-Debian: https://bugs.debian.org/1024932
Last-Update: 2022-11-28

If privileges cannot be dropped, log an error and exit.  This commit
also catches and logs exceptions when scraping the crash path, without
which ceph-crash would just exit if it encountered an error.

Gbp-Pq: Name CVE-2022-3650_1_ceph-crash_drop_privleges_to_run_as_ceph_user_rather_than_root.patch
src/ceph-crash.in