Ubuntu
policykit-1 package

  1. Bug #1784964
  2. Comment #7

Comment 7 for bug 1784964

Revision history for this message
Alex Murray (alexmurray) wrote : Re: Regression due to CVE-2018-1116 (processes not inheriting user ID or groups )

I can't reproduce this myself but I am using the default shell (bash provided by dash) and gnome-terminal. My understanding of the change to policykit-1 https://git.launchpad.net/ubuntu/+source/policykit-1/commit/?h=applied/ubuntu/bionic-devel&id=840c50182f5ab1ba28c1d20cce4c207364852935 is that previously the UID was supplied by the caller and used without validation - instead now policykit tries to validate the supplied UID against the actual UID of the subject - however this could change over time and is racy - so there are a bunch of failure modes which this change to policykit introduces which would previously have worked.