Bug 25835 - nscd: Use the same fallbacks as non-nscd code for caching initgroups and groups data.
Summary: nscd: Use the same fallbacks as non-nscd code for caching initgroups and grou...
Status: NEW
Alias: None
Product: glibc
Classification: Unclassified
Component: nss (show other bugs)
Version: 2.32
: P2 normal
Target Milestone: ---
Assignee: Not yet assigned to anyone
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2020-04-16 12:42 UTC by Carlos O'Donell
Modified: 2020-04-16 12:44 UTC (History)
1 user (show)

See Also:
Host:
Target:
Build:
Last reconfirmed:
fweimer: security-

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Carlos O'Donell 2020-04-16 12:42:04 UTC 
When runnning nscd the daemon does not use initgroups like it should:

 90   if (group_database == NULL)
 91     no_more = __nss_database_lookup2 ("group", NULL, DEFAULT_CONFIG,
 92                                       &group_database);
 93   else
 94     no_more = 0;

We query group directly, but should use the same fallback logic as the non-nscd code in order to bring parity with the lookup results.

See the RHEL bug:
https://bugzilla.redhat.com/show_bug.cgi?id=1363924