Bug#762448: gunicorn: Does not set supplementary groups when changing uid

[Filippos Giannakos]

Package: gunicorn
Version: 0.14.5-3+deb7u1
Severity: normal
Tags: upstream patch

Dear Maintainer,

When setting a user for a gunicorn worker, gunicorn sets the uid of the process
but does not set the supplementary groups the user belongs to.

Please find a patch against upstream version 0.14.5 attached. The patch
addresses the problem by initializing the process groups using initgroups before
changing the uid.

Kind Regards,
Filippos

-- System Information:
Debian Release: 7.5
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/24 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to en_US.UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages gunicorn depends on:
ii python 2.7.3-4+deb7u1
ii python-pkg-resources 0.6.24-1
ii python-setuptools 0.6.24-1

gunicorn recommends no packages.

Versions of packages gunicorn suggests:
ii python-gevent 0.13.6-1+nmu3
pn python-pastedeploy <none>
ii python-setproctitle 1.0.1-1+b1
pn python-tornado <none>

-- no debconf information