Debian Bug report logs - #900564
UID and EUID are not reliably set

Package: bash; Maintainer for bash is Matthias Klose <doko@debian.org>; Source for bash is src:bash (PTS, buildd, popcon).

Reported by: Richard Kettlewell <rjk@terraraq.uk>

Date: Fri, 1 Jun 2018 11:21:02 UTC

Severity: normal

Found in version bash/4.4-5

Reply or subscribe to this bug.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox

Report forwarded to debian-bugs-dist@lists.debian.org, Matthias Klose <doko@debian.org>:
Bug#900564; Package bash. (Fri, 01 Jun 2018 11:21:04 GMT) (full text, mbox, link).

Acknowledgement sent to Richard Kettlewell <rjk@terraraq.uk>:
New Bug report received and forwarded. Copy sent to Matthias Klose <doko@debian.org>. (Fri, 01 Jun 2018 11:21:04 GMT) (full text, mbox, link).

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

Package: bash
Version: 4.4-5

According to the man page:

       UID    Expands to the user ID of the current user, initialized at
shell
              startup.  This variable is readonly.

However, if the variable is set in the environment then it will inherit
it from there rather than initializing it during startup. The same is
true of EUID and perhaps others.

$ bash -c 'echo $UID'
1000
$ env UID=spong bash -c 'echo $UID'
spong

The example is contrived but the issue has a real impact, for example:
  http://aptosid.com/index.php?name=PNphpBB2&file=viewtopic&t=2985

ttfn/rjk

Send a report that this bug log contains spam.

Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Wed Dec 6 08:33:49 2023; Machine Name: bembo

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Debian Bug report logs - #900564 UID and EUID are not reliably set

Debian Bug report logs - #900564
UID and EUID are not reliably set