From nobody Sun Apr 12 13:44:05 2026 X-Original-To: dev-commits-src-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4ftsFx4hNTz6ZM5V for ; Sun, 12 Apr 2026 13:44:05 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R12" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4ftsFx304Lz3kLR for ; Sun, 12 Apr 2026 13:44:05 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1776001445; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=AVo9B8My8XuQdtoPK67bwAG4OhTt1nNYYSK72lZW/bM=; b=CXpR/UDW4zn5Mqk2BpiY980wAt1mrpDlUX18UPjKVIQbh5LFzVmuDzKm9vAC8O2Fh2qWJe 8nsySqycHgmYU27iYU0o1ovGQHlGgLewPpd5OjN+ZriXLJnifUSUmPCzcgQj1P+07Y0TqK cLgQVjbuoVmaBA2q1KMHU5z2PShHMKnoEhFn3TMJ+t3l2hPGKEngcGH0wzpErOnDu5+RjI c+liruPx/0NUy/DT8xtfJvDLZ8ywSeJRQaLEdLNZh5611r8of6487yIFNRr1fXig3Si45o JaqKpr3JfJwrY5S5+wGjqWCNyId1Q1q8S09AgKg8ePdupGZD5ZqtuwT9wvVoDw== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1776001445; a=rsa-sha256; cv=none; b=vJ94ay0j+QFLmuNYqdnz+Gx/+Vzy1kR90eZCqSf0q4VAwrCVFMMYB50arVNh6H1rxPlNb6 x7ROCXHZlovnJnrWFqW+FuxIzHFiAn4T6XMv0Fz9xqW67K3ljEiM0QwsFYHvDNpCr/qWsT hCMZhqTDfAmocqepPOU5DHYBPKIKtCRLoLCg06VxYlxNnzd5Iz9WbhpjiRC4E3nka6WbBL GTKczjpBRUeezmfNakfjc/viQAOPJN1CjjqibZf6Uizq3unXR+4hJ56o+aXkA7LL7oZ9Ti Vp6N9YZxXtRFpR3HCD4hbfbVncQX51XSq0BXgs6xV+w6qQ4yXF1Kgj1wmRbkKQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1776001445; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=AVo9B8My8XuQdtoPK67bwAG4OhTt1nNYYSK72lZW/bM=; b=BWOPOUo74MCz+ksYqpcWwpu7XvS1b57Yg2L3yKLgSwPkII9GWn88/9Y3+PhQnbtOdUWSjV VBJO1vo9rjjpER70wls39JAKbq0+BeQ8uk6UeD+8zSGhed9ucWV0tNcyan0yb8T6pvTPMZ 4YrB9hb8P0GCJYBYtQZ12LLthPFSuqxslcCeibtlBnUMhc46YmR/ASD8D5x9mfyn/NJVby yeZXCB0Xaac2XwkldilXArBo8bexYRJcFoFYt42HRJh+W1zp4BQfsCi58ts4FBO8pMpoIK u0I0pfQZdFkUB9qmGGXhKfOPpJXgOotPtF57LIUYi70HbV11ZoKQPWNZ13xzng== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) by mxrelay.nyi.freebsd.org (Postfix) with ESMTP id 4ftsFx2K3Dz41D for ; Sun, 12 Apr 2026 13:44:05 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from git (uid 1279) (envelope-from git@FreeBSD.org) id 40cd1 by gitrepo.freebsd.org (DragonFly Mail Agent v0.13+ on gitrepo.freebsd.org); Sun, 12 Apr 2026 13:44:05 +0000 To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-branches@FreeBSD.org From: Kyle Evans Subject: git: e2d48181239e - stable/14 - inetd: don't assume that initgroups(3) will set the egid List-Id: Commit messages for all branches of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-all@freebsd.org Sender: owner-dev-commits-src-all@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: kevans X-Git-Repository: src X-Git-Refname: refs/heads/stable/14 X-Git-Reftype: branch X-Git-Commit: e2d48181239e99b825862156cd5d6a9756875125 Auto-Submitted: auto-generated Date: Sun, 12 Apr 2026 13:44:05 +0000 Message-Id: <69dba1a5.40cd1.1d04e601@gitrepo.freebsd.org> The branch stable/14 has been updated by kevans: URL: https://cgit.FreeBSD.org/src/commit/?id=e2d48181239e99b825862156cd5d6a9756875125 commit e2d48181239e99b825862156cd5d6a9756875125 Author: Kyle Evans AuthorDate: 2025-08-08 22:34:56 +0000 Commit: Kyle Evans CommitDate: 2026-04-12 13:43:36 +0000 inetd: don't assume that initgroups(3) will set the egid inetd, in the ident provider, seems to be the only initgroups(3) caller in base that assumes it will set the egid. Everyone else uses it as it's typically used on other platforms: to initialize supplementary groups. (cherry picked from commit 33dd42e632982ba324789f47041d03ceb65f6560) --- usr.sbin/inetd/builtins.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/usr.sbin/inetd/builtins.c b/usr.sbin/inetd/builtins.c index aed304ae99c2..0de2179ef52b 100644 --- a/usr.sbin/inetd/builtins.c +++ b/usr.sbin/inetd/builtins.c @@ -606,6 +606,8 @@ ident_stream(int s, struct servtab *sep) */ if (initgroups(pw->pw_name, pw->pw_gid) == -1) iderror(lport, fport, s, ID_UNKNOWN); + if (setegid(pw->pw_gid) == -1) + iderror(lport, fport, s, ID_UNKNOWN); if (seteuid(pw->pw_uid) == -1) iderror(lport, fport, s, ID_UNKNOWN); /*