{"action":"created","issue":{"url":"https://api.github.com/repos/DinoTools/dionaea/issues/177","repository_url":"https://api.github.com/repos/DinoTools/dionaea","labels_url":"https://api.github.com/repos/DinoTools/dionaea/issues/177/labels{/name}","comments_url":"https://api.github.com/repos/DinoTools/dionaea/issues/177/comments","events_url":"https://api.github.com/repos/DinoTools/dionaea/issues/177/events","html_url":"https://github.com/DinoTools/dionaea/issues/177","id":312154806,"number":177,"title":"dionaea doesn't drop privileged groups before dropping to user doing setresuid","user":{"login":"xambroz","id":723625,"avatar_url":"https://avatars2.githubusercontent.com/u/723625?v=4","gravatar_id":"","url":"https://api.github.com/users/xambroz","html_url":"https://github.com/xambroz","followers_url":"https://api.github.com/users/xambroz/followers","following_url":"https://api.github.com/users/xambroz/following{/other_user}","gists_url":"https://api.github.com/users/xambroz/gists{/gist_id}","starred_url":"https://api.github.com/users/xambroz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/xambroz/subscriptions","organizations_url":"https://api.github.com/users/xambroz/orgs","repos_url":"https://api.github.com/users/xambroz/repos","events_url":"https://api.github.com/users/xambroz/events{/privacy}","received_events_url":"https://api.github.com/users/xambroz/received_events","type":"User","site_admin":false},"labels":[{"id":302393816,"url":"https://api.github.com/repos/DinoTools/dionaea/labels/type:bug","name":"type:bug","color":"fc2929","default":false}],"state":"closed","locked":false,"assignee":{"login":"phibos","id":1975606,"avatar_url":"https://avatars2.githubusercontent.com/u/1975606?v=4","gravatar_id":"","url":"https://api.github.com/users/phibos","html_url":"https://github.com/phibos","followers_url":"https://api.github.com/users/phibos/followers","following_url":"https://api.github.com/users/phibos/following{/other_user}","gists_url":"https://api.github.com/users/phibos/gists{/gist_id}","starred_url":"https://api.github.com/users/phibos/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/phibos/subscriptions","organizations_url":"https://api.github.com/users/phibos/orgs","repos_url":"https://api.github.com/users/phibos/repos","events_url":"https://api.github.com/users/phibos/events{/privacy}","received_events_url":"https://api.github.com/users/phibos/received_events","type":"User","site_admin":false},"assignees":[{"login":"phibos","id":1975606,"avatar_url":"https://avatars2.githubusercontent.com/u/1975606?v=4","gravatar_id":"","url":"https://api.github.com/users/phibos","html_url":"https://github.com/phibos","followers_url":"https://api.github.com/users/phibos/followers","following_url":"https://api.github.com/users/phibos/following{/other_user}","gists_url":"https://api.github.com/users/phibos/gists{/gist_id}","starred_url":"https://api.github.com/users/phibos/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/phibos/subscriptions","organizations_url":"https://api.github.com/users/phibos/orgs","repos_url":"https://api.github.com/users/phibos/repos","events_url":"https://api.github.com/users/phibos/events{/privacy}","received_events_url":"https://api.github.com/users/phibos/received_events","type":"User","site_admin":false}],"milestone":{"url":"https://api.github.com/repos/DinoTools/dionaea/milestones/7","html_url":"https://github.com/DinoTools/dionaea/milestone/7","labels_url":"https://api.github.com/repos/DinoTools/dionaea/milestones/7/labels","id":1956363,"number":7,"title":"0.7.0","description":"","creator":{"login":"phibos","id":1975606,"avatar_url":"https://avatars2.githubusercontent.com/u/1975606?v=4","gravatar_id":"","url":"https://api.github.com/users/phibos","html_url":"https://github.com/phibos","followers_url":"https://api.github.com/users/phibos/followers","following_url":"https://api.github.com/users/phibos/following{/other_user}","gists_url":"https://api.github.com/users/phibos/gists{/gist_id}","starred_url":"https://api.github.com/users/phibos/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/phibos/subscriptions","organizations_url":"https://api.github.com/users/phibos/orgs","repos_url":"https://api.github.com/users/phibos/repos","events_url":"https://api.github.com/users/phibos/events{/privacy}","received_events_url":"https://api.github.com/users/phibos/received_events","type":"User","site_admin":false},"open_issues":2,"closed_issues":46,"state":"open","created_at":"2016-08-22T21:08:13Z","updated_at":"2018-04-26T21:34:24Z","due_on":null,"closed_at":null},"comments":0,"created_at":"2018-04-07T00:27:51Z","updated_at":"2018-04-26T21:34:24Z","closed_at":"2018-04-26T21:34:24Z","author_association":"CONTRIBUTOR","body":"<!--- Verify first that your issue/request has not already been reported -->\r\n\r\n##### ISSUE TYPE\r\n<!--- Pick one below and delete the rest: -->\r\n - Bug Report\r\n\r\n\r\n##### DIONAEA VERSION\r\n<!--- Paste verbatim output from “dionaea --version” or the hash of the git commit between quotes below. -->\r\n```\r\nDionaea Version 0.6.0 commit 1748f3b3936aa1da2d92500251ae8010fe181dfc\r\nCompiled on Linux/x86_64 at Apr  7 2018 01:53:56 with gcc 7.3.1 20180303 (Red Hat 7.3.1-5) \r\nStarted on myhost running Linux/x86_64 release 4.15.12-301.fc27.x86_64\r\n\r\n```\r\n\r\n##### CONFIGURATION\r\n<!--- Describe your config settings briefly -->\r\nirelevant\r\n\r\n##### OS / ENVIRONMENT\r\n<!---\r\nAdd information about the os you are running dionaea on.\r\nPick one below and delete the rest:\r\n-->\r\n- irelevat\r\n- fedora 27\r\n\r\n##### SUMMARY\r\n<!--- Explain the problem briefly. -->\r\nWhen rpmlint is executed to the binary dionaea package it is warning about the \"dionaea\" application not calling the setgroups to drop privileged/all groups.\r\n\r\n\r\n##### STEPS TO REPRODUCE\r\n<!---\r\nTry to describe the steps how to reproduce the issue.\r\nIf you have used a tool like nmap add all commandline options.\r\n-->\r\n```\r\n$ rpmlint ~/rpmbuild/SRPMS/dionaea-0.6.0-4.20180326git1748f3b.fc27.src.rpm ~/rpmbuild/rpmbuild/RPMS/x86_64/dionaea-0.6.0-4.20180326git1748f3b.fc27.x86_64.rpm\r\n```\r\n<!--- You can also add links to gist.github.com. -->\r\n\r\n##### ACTUAL RESULTS\r\n<!--- What actually happened? If possible run with increased log level (-l all -L '*') -->\r\n\r\n<!--- Paste verbatim output between the quotes below -->\r\n```\r\ndionaea.x86_64: E: missing-call-to-setgroups-before-setuid /usr/sbin/dionaea\r\nThis executable is calling setuid and setgid without setgroups or initgroups.\r\nThere is a high probability this means it didn't relinquish all groups, and\r\nthis would be a potential security issue to be fixed. Seek POS36-C on the web\r\nfor details about the problem.\r\n```\r\n"},"comment":{"url":"https://api.github.com/repos/DinoTools/dionaea/issues/comments/384796173","html_url":"https://github.com/DinoTools/dionaea/issues/177#issuecomment-384796173","issue_url":"https://api.github.com/repos/DinoTools/dionaea/issues/177","id":384796173,"user":{"login":"phibos","id":1975606,"avatar_url":"https://avatars2.githubusercontent.com/u/1975606?v=4","gravatar_id":"","url":"https://api.github.com/users/phibos","html_url":"https://github.com/phibos","followers_url":"https://api.github.com/users/phibos/followers","following_url":"https://api.github.com/users/phibos/following{/other_user}","gists_url":"https://api.github.com/users/phibos/gists{/gist_id}","starred_url":"https://api.github.com/users/phibos/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/phibos/subscriptions","organizations_url":"https://api.github.com/users/phibos/orgs","repos_url":"https://api.github.com/users/phibos/repos","events_url":"https://api.github.com/users/phibos/events{/privacy}","received_events_url":"https://api.github.com/users/phibos/received_events","type":"User","site_admin":false},"created_at":"2018-04-26T21:34:24Z","updated_at":"2018-04-26T21:34:24Z","author_association":"OWNER","body":"Thanks for reporting the issue and providing a patch to fix it. The fix will be available in the next version."}}
{"actor":{"display_login":"phibos"}}