Description
The chroot helper in rMake for rPath Linux 1 does not drop supplemental groups, which causes packages to be installed with insecure permissions and might allow local users to gain privileges.
References
- 23922 third-party-advisory
- https://issues.rpath.com/browse/RPL-987
- http://lists.rpath.com/pipermail/security-announce/2007-January/000137.html
- rpath-rmake-privilege-escalation(31942) vdb-entry
- 32972 vdb-entry