naparuba/shinken — Issue #43: Missing supplementary groups in daemons
Author: Frescha
Created: 2011-10-30 16:29:22+00:00
State: open

When started, daemons (scheduler poller reactionner broker receiver arbiter) switch real and effective uid and gid to those defined in configuration files: (daemon.py)
os.setregid(gid, gid)
os.setreuid(uid, uid)

BUT, supplementary groups are not initialized (initgroups function).

So, supplementary groups cannot be used to get some extra accesses to execute checks: for example, read some files that need special access rights.