diff --git a/amanda-3.4.1-krb5-security.patch b/amanda-3.4.1-krb5-security.patch new file mode 100644 index 0000000..0cdcd6f --- /dev/null +++ b/amanda-3.4.1-krb5-security.patch @@ -0,0 +1,15 @@ +diff -urNp old/common-src/krb5-security.c new/common-src/krb5-security.c +--- old/common-src/krb5-security.c 2017-01-31 11:00:37.371830373 +0100 ++++ new/common-src/krb5-security.c 2017-01-31 11:02:47.386259381 +0100 +@@ -390,7 +390,10 @@ krb5_accept( + *(making the userid equal to the dumpuser) + */ + pw = getpwnam(CLIENT_LOGIN); +- setreuid(pw->pw_uid, pw->pw_uid); ++ if(setreuid(pw->pw_uid, pw->pw_uid) == -1) { ++ g_critical("setreuid failed: %s", srterror(errno)); ++ exit(1); ++ } + } + + /* diff --git a/amanda.spec b/amanda.spec index d3d45f4..f2d1e7e 100644 --- a/amanda.spec +++ b/amanda.spec @@ -10,7 +10,7 @@ Summary: A network-capable tape backup solution Name: amanda Version: 3.4.1 -Release: 3%{?dist} +Release: 4%{?dist} Source: http://downloads.sourceforge.net/amanda/amanda-%{version}.tar.gz Source1: amanda.crontab Source4: disklist @@ -29,6 +29,7 @@ Patch3: amanda-3.2.0-config-dir.patch #Bugfix - solved problem with permission error message (#1257686) Patch4: amanda-3.3.9-hash-permission.patch Patch5: amanda-3.4.1-support-old-clients.patch +Patch6: amanda-3.4.1-krb5-security.patch License: BSD and GPLv3+ and GPLv2+ and GPLv2 Group: Applications/System @@ -442,6 +443,9 @@ rm -rf ${RPM_BUILD_ROOT} %changelog +* Tue Jan 31 2017 Josef Ridky - 3.4.1-4 +- Fix warning with checking return value from setreuid in krb5-security.c (#1417828) + * Fri Jan 13 2017 Jason L Tibbitts III - 3.4.1-3 - Add patch to avoid breakage with RHEL5 clients.