File rpmlint-security-fixes.patch of Package kcgi

diff -ur kcgi-VERSION_0_10_11.orig/kfcgi.c kcgi-VERSION_0_10_11/kfcgi.c
--- kcgi-VERSION_0_10_11.orig/kfcgi.c	2019-08-10 03:17:34.000000000 -0500
+++ kcgi-VERSION_0_10_11/kfcgi.c	2020-01-09 17:47:38.354059975 -0600
@@ -1063,7 +1063,11 @@
 	/* 
 	 * Jail our file-system.
 	 */
-	if (-1 == chroot(chpath)) {
+	if (-1 == chdir(chpath)) {
+		perror("chdir");
+		close(fd);
+		return(EXIT_FAILURE);
+	} else if (-1 == chroot(chpath)) {
 		perror("chroot");
 		close(fd);
 		return(EXIT_FAILURE);
@@ -1075,6 +1079,7 @@
 	}
 
 	if (NULL != procuser)  {
+		setgroups(0, NULL);
 		if (0 != setgid(procgid)) {
 			perror(procuser);
 			close(fd);
openSUSE Build Service is sponsored by