Description: Setting a POSIX ACL via setxattr doesn't clear the setgid bit References: http://www.spinics.net/lists/linux-fsdevel/msg98328.html http://marc.info/?l=linux-fsdevel&m=147162313630259&w=2 https://bugzilla.redhat.com/show_bug.cgi?id=1368938 Notes: carnil> The fix for CVE-2016-7097 seem to have introduced a regresssion carnil> as claimed in https://savannah.nongnu.org/bugs/?51818#comment1 carnil> and addressed via https://patchwork.ozlabs.org/patch/799154/ carnil> Released in 4.13-rc4 [a3bb2d5587521eea6dab2d05326abb0afb460abd] carnil> and is CC'ed to stable@vger.kernel.org carnil> Fixed as well in 4.12.6 [0965d89ebda3d71338ab2573c1a4d784c1e79611] carnil> More filesystems fixed already earlier, found commits: carnil> a3bb2d558752 ext4: Don't clear SGID when inheriting ACLs carnil> 9bcf66c72d72 jfs: Don't clear SGID when inheriting ACLs carnil> 84969465ddc4 hfsplus: Don't clear SGID when inheriting ACLs carnil> a992f2d38e4c ext2: Don't clear SGID when inheriting ACLs carnil> 6883cd7f6824 reiserfs: Don't clear SGID when inheriting ACLs carnil> c925dc162f77 f2fs: Don't clear SGID when inheriting ACLs carnil> b7f8a09f8097 btrfs: Don't clear SGID when inheriting ACLs carnil> 8ba358756aa0 xfs: Don't clear SGID when inheriting ACLs Bugs: upstream: released (4.9-rc1) [073931017b49d9458aa351605b43a7e34598caef] 3.16-upstream-stable: released (3.16.39) [posix_acl-clear-sgid-bit-when-setting-file-permissions.patch] 3.2-upstream-stable: released (3.2.84) [posix_acl-clear-sgid-bit-when-setting-file-permissions.patch] sid: released (4.7.8-1) [bugfix/all/posix_acl-clear-sgid-bit-when-setting-file-permissio.patch] 3.16-jessie-security: released (3.16.39-1) 3.2-wheezy-security: released (3.2.84-1)