diff options
| author | Theo de Raadt <deraadt@cvs.openbsd.org> | 2003-10-22 19:35:45 +0000 |
|---|---|---|
| committer | Theo de Raadt <deraadt@cvs.openbsd.org> | 2003-10-22 19:35:45 +0000 |
| commit | 44992a51d9ac6082f101611951cb5f4d4a513cd8 (patch) | |
| tree | d7a19e3d64adc19c08c7ba6be330f1758d915c98 /sbin | |
| parent | 003d15deb6f54de29515b9e61ae6d028aa2d6874 (diff) | |
use setgroups too; canacar ok
Diffstat (limited to 'sbin')
| -rw-r--r-- | sbin/pflogd/privsep.c | 8 |
1 files changed, 7 insertions, 1 deletions
diff --git a/sbin/pflogd/privsep.c b/sbin/pflogd/privsep.c index fbbe0162bb7..1ba935c0675 100644 --- a/sbin/pflogd/privsep.c +++ b/sbin/pflogd/privsep.c @@ -1,4 +1,4 @@ -/* $OpenBSD: privsep.c,v 1.2 2003/10/22 19:21:57 deraadt Exp $ */ +/* $OpenBSD: privsep.c,v 1.3 2003/10/22 19:35:44 deraadt Exp $ */ /* * Copyright (c) 2003 Can Erkin Acar @@ -82,10 +82,16 @@ priv_init(void) err(1, "fork() failed"); if (!child_pid) { + gid_t gidset[1]; + /* Child - drop privileges and return */ if (chroot(pw->pw_dir) != 0) err(1, "unable to chroot"); chdir("/"); + + gidset[0] = pw->pw_gid; + if (setgroups(1, gidset) == -1) + err(1, "setgroups() failed"); if (setegid(pw->pw_gid) == -1) err(1, "setegid() failed"); if (setgid(pw->pw_gid) == -1) |