"require.user: unprivileged" retains operator group

[Peter Holm]

On Mon, Mar 10, 2014 at 08:14:01AM -0700, Garrett Cooper wrote:
> 
> > On Mar 10, 2014, at 8:00, Alan Somers <asomers at freebsd.org> wrote:
> > 
> >> On Mon, Mar 10, 2014 at 4:16 AM, Peter Holm <peter at holm.cc> wrote:
> >> $ kyua test user_test
> >> user_test:rootuser  ->  skipped: Requires root privileges  [0.001s]
> >> user_test:nonrootuser  ->  broken: Caught unexpected exception: Tester failed with code 2; this is a bug  [0.039s]
> >> 
> >> 1/2 passed (1 failed)
> >> Committed action 1
> >> $ su
> >> Password:
> >> root at x4:/usr/tests/sys/kern # kyua test user_test
> >> user_test:rootuser  ->  passed  [0.031s]
> >> user_test:nonrootuser  ->  passed  [0.022s]
> >> 
> >> 2/2 passed (0 failed)
> >> Committed action 50
> >> root at x4:/usr/tests/sys/kern # kyua debug user_test:rootuser
> >> uid=0(root) gid=0(wheel) groups=0(wheel),5(operator)
> >> user_test:rootuser  ->  passed
> >> root at x4:/usr/tests/sys/kern # kyua debug user_test:nonrootuser
> >> uid=977(tests) gid=65534(nobody) groups=65534(nobody),5(operator)
> >> user_test:nonrootuser  ->  passed
> >> root at x4:/usr/tests/sys/kern #
> >> 
> >> http://people.freebsd.org/~pho/user_test.c
> >> --
> >> Peter
> > 
> > I can reproduce it.  Looks like an upstream bug in Kyua.
> 
> Yes. Unfortunately unless you get the appropriate mode for Kyua, it won't be able to setuid to a lower privilege unless it's run as root..
> Cheers!
> -Garrett

Guess you both talk about the "Caught unexpected exception" issue?
What about the fact that the unprivileged user is member of group
"operator"?

-- 
Peter