]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
[3.13] gh-151519: Check effective gid in `_test_all_chown_common` group-0 guard ... 3.13
authorMiss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
Tue, 16 Jun 2026 16:42:16 +0000 (18:42 +0200)
committerGitHub <noreply@github.com>
Tue, 16 Jun 2026 16:42:16 +0000 (09:42 -0700)
commit733411a2199a25635c268099ee8584c128396766
tree9cad3fc49ee1d3063c8ed2e112b5f60a28aaa7cf
parentc8e60d589733e688e24ca5dc1aabb6a6dae5b39c
[3.13] gh-151519: Check effective gid in `_test_all_chown_common` group-0 guard (GH-151521) (#151551)

gh-151519: Check effective gid in `_test_all_chown_common` group-0 guard (GH-151521)

The guard that skips the "chown to gid 0 should fail" assertion used
only `os.getgroups()` (supplementary groups). The kernel also accepts
the effective/filesystem gid for chown, so when a process runs with
egid 0 and a non-zero uid (common in containers and user namespaces),
chown(-1, 0) succeeds and the assertion spuriously fails.

Add an `os.getegid() != 0` check alongside the existing
`0 not in os.getgroups()` guard.
(cherry picked from commit 2ce260033b457a0ad2c9767a1d9902bef5a30b0e)

Co-authored-by: Itamar Oren <itamarost@gmail.com>
Lib/test/test_posix.py