CA Access Control granted the setgid request without checking any SURROGATE access rules. In the message text, ppp is the issuing process id; uuu is the userid associated with this process; rg, eg, and sg are the real, effective, and saved GID of that process; and trg, teg, and tsg are the target effective, real, and saved GID with which the setgid request was issued. The reason for the bypass is usually because the current real or saved GID is the same as the target GID, and therefore the setgid request does not change the security scope of the user.
| Copyright © 2012 CA. All rights reserved. |
|