]> git.ipfire.org Git - thirdparty/make.git/commit
[SV 61621] Don't use POSIX_SPAWN_RESETIDS with posix_spawn()
authorPaul Smith <psmith@gnu.org>
Sun, 5 Dec 2021 19:22:43 +0000 (14:22 -0500)
committerPaul Smith <psmith@gnu.org>
Sun, 19 Dec 2021 21:34:10 +0000 (16:34 -0500)
commit1d20aa7247ece1a08bed7fa4ba5ab6b7c0f332b0
treef90988667e14b5c248908d57662a8bf5541ae76e
parent21f7ac8f473923413c0798ac866ed6c97eca6eaf
[SV 61621] Don't use POSIX_SPAWN_RESETIDS with posix_spawn()

When make is invoked in a environment where the user namespace is
restricted, such as under unshare(1) (on GNU/Linux), it won't be able
to find its real UID so the effective UID can't be set to it and
posix_spawn() will fail with EINVAL.

It's not less safe to run recipe jobs using the same UID values that
make was invoked with, so don't worry about this flag.

* src/job.c (child_execute_job): Don't set POSIX_SPAWN_RESETIDS flag.
src/job.c