jvgutierrez opened a new issue, #11869:
URL: https://github.com/apache/trafficserver/issues/11869

   As a side effect of https://github.com/apache/trafficserver/pull/11855 ATS 
is now unable to start as root:
   
   [traffic_manager uses ImpersonateUser() 
](https://github.com/apache/trafficserver/blob/de3e58726f6f58a95266a41eaa31ff3c6fc14336/src/traffic_manager/traffic_manager.cc#L1084)to
 drop privileges triggering the following syscalls:
   ```
   450941 setgroups(1, [123])              = 0
   450941 setresgid(-1, 123, -1)           = 0
   450941 setresuid(-1, 118, -1)           = 0
   ```
   
   afterwards traffic_server attempts to drop privileges as well but setgroups 
fails due to lack of permissions:
   ```
   450952 setgroups(1, [123])              = -1 EPERM (Operation not permitted)
   ```
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to