Re: Security release for mod_wsgi (version 3.5)

[Seth Arnold <seth.arnold () canonical com>]

On Tue, Jun 17, 2014 at 10:39:49PM +1000, Graham Dumpleton wrote:
> On MacOS X at least, it [setgid] really doesn't care what you give it.
> You can give it negative numbers or even really large numbers and it
> will happily set it to the value. I can't find any good information on
> what Linux would do and can't test it right now.

On Linux, since 2.4 times, all representable values in gid_t are legal
group ids:

http://manpages.ubuntu.com/manpages/trusty/en/man2/setgid.2.html

Thanks

Attachment: signature.asc
Description: Digital signature